last executing test programs: 1.772636429s ago: executing program 4 (id=11988): r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000040), 0xc) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) writev(r1, &(0x7f0000000680)=[{&(0x7f0000000080)='~', 0x1}], 0x1) ioctl$sock_qrtr_TIOCINQ(r0, 0x541b, &(0x7f0000000000)) 1.67239369s ago: executing program 4 (id=11992): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f00000003c0)={r2, @in={{0x2, 0x4e21, @multicast2}}, [0xfffffffffffffff9, 0xd, 0x1, 0x5, 0x1, 0x7, 0x0, 0x2, 0x29, 0xfffffffffffffffe, 0x700, 0x8000000000000000, 0x19c, 0x9, 0x100000000000]}, &(0x7f0000000100)=0x100) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000180)={r3, 0x4}, 0x8) 1.402235096s ago: executing program 3 (id=12000): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000640)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0}], 0x1, 0x20040802) recvmmsg$unix(r1, &(0x7f0000003900)=[{{0x0, 0x0, &(0x7f0000003bc0)=[{&(0x7f0000000700)=""/218, 0xda}], 0x1}}], 0x1, 0x41, 0x0) 1.309189451s ago: executing program 3 (id=12001): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-blowfish-asm\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ad060000", 0x4) sendmmsg$inet(r1, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000140)="17", 0x1}, {&(0x7f0000002a40)="0d5ebfd6dfe98a01b2fb5b0eb19a417353a0833d961a98422333bb10a75289c4353c82666dbc1db13e2138", 0x2b}], 0x2, &(0x7f0000003840)=ANY=[@ANYBLOB='@'], 0x40}}], 0x1, 0x715076165a76ad26) recvmmsg(r1, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000200)=""/120, 0x1f}, {&(0x7f0000000100)=""/13, 0xd}], 0x2}, 0x5}], 0x1, 0x0, 0x0) 1.250009897s ago: executing program 3 (id=12003): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f00000007c0)=0x40000401, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x6, @rand_addr=' \x01\x00', 0x8000}, 0x1c) 1.170302905s ago: executing program 3 (id=12004): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000001010400000000141a000002000010240001801400018008000100e000000108000200e00000010c00028005000100000000001800028014000180080001"], 0x50}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a1b000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x11, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0300"], 0x122}}, 0x0) 1.036809188s ago: executing program 3 (id=12008): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) sendmsg$can_bcm(r1, 0x0, 0x4008000) 713.186521ms ago: executing program 4 (id=12016): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x48, 0x2c, 0xd27, 0x170bd3b, 0x2, {0x0, 0x0, 0x0, r2, {0xa, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'hsr0\x00'}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4008014}, 0x2) 690.294252ms ago: executing program 0 (id=12018): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r0 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="75016a009cdc58"], 0xdd12}, {&(0x7f00000002c0)={0x80, 0x12, 0x2, 0x70bd27, 0x25dfdbfd, "", [@generic="278b7b3f06d46bd7c8ce8161f8b77a17d58f1425b569e24653e0132c752e47e9c246f1836058ca4bd2a7ce212df52762c6be241d84da2af2cbc561c28d48740c1f1a57167231ec30167aef1122c4f323e59183ada7af6019652c55b66163bec7630323c05599fb7daaefa3f3d55d6206"]}, 0x80}], 0x2, 0x0, 0x0, 0x200488c7}, 0x4048820) 613.778919ms ago: executing program 0 (id=12020): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, r1, 0x2, 0x2000, 0x100002, {}, [@NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0x85}, @NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0xa}]}, 0x24}, 0x1, 0x0, 0x0, 0x20085}, 0x2000c000) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}}, 0x28}, 0x1, 0x6c00}, 0x0) 603.820939ms ago: executing program 1 (id=12021): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x200, 0x0, 0x25dfdb7b, {{@in=@loopback, @in6=@private0, 0x0, 0x4, 0x4e23, 0x10, 0xa, 0x60, 0x80, 0x0, 0x0, 0xee01}, {0x0, 0x4, 0x3, 0x0, 0x40, 0xfffffffffffffffd, 0x20000002}, {0xfffffffffffffffe}, 0x7, 0x40000000, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0xc18}, 0x50) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000001"], 0xb8}}, 0x20004000) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 593.21025ms ago: executing program 4 (id=12022): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000c0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000014b80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_SET_ELEM_KEY={0x4}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 548.535043ms ago: executing program 2 (id=12023): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x0, 0x291c9}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x20000000000080}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x34041043}, 0x4004000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 493.645218ms ago: executing program 1 (id=12024): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000440)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "5bebd250addb1b29", "0fe52ccf5ae523f0d36375dedff0d425", "5cccf758", "0002000000f3ff00"}, 0x28) setsockopt$inet6_tcp_int(r0, 0x11a, 0x4, &(0x7f0000000000), 0x1) 483.495265ms ago: executing program 2 (id=12025): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'team_slave_1\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x60, r3, 0x405, 0x70bd2b, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffc}}, {0x8, 0x6, r1}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x2404c080) 478.930621ms ago: executing program 4 (id=12026): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r0, &(0x7f00000015c0)=[{&(0x7f00000001c0)=""/98, 0x62}, {0x0}, {&(0x7f00000004c0)=""/4096, 0x1000}], 0x3) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000100)=0x1000) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) 382.314507ms ago: executing program 1 (id=12027): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x840}, 0x4040880) recvmmsg$unix(r1, &(0x7f00000062c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000600)=""/196, 0xc4}], 0x1}}], 0x1, 0x2001, 0x0) 380.930282ms ago: executing program 0 (id=12028): r0 = socket(0x2c, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="110000000400000004000000ff"], 0x17) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r1, &(0x7f0000000200), &(0x7f0000001500)=@tcp=r0}, 0x20) close(r0) 362.143671ms ago: executing program 2 (id=12029): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg$unix(r1, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000001940)=""/216, 0xd8}], 0x1}, 0x2) 317.651449ms ago: executing program 0 (id=12030): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f00000021c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x880}], 0x1, 0x80001) recvmmsg(r1, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000001080)=""/4096, 0x1000}], 0x1}, 0x40}], 0x1, 0x102, 0x0) 317.004583ms ago: executing program 1 (id=12031): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xc, 0xb}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x8, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x4, 0x30}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) 233.24561ms ago: executing program 2 (id=12032): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newlink={0x6c, 0x10, 0x437, 0x800000, 0x0, {0x0, 0x0, 0x0, r2, 0x504c3}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_DIR={0x5, 0x17, 0xd9}, @IFLA_GRE_OKEY={0x8, 0x5, 0x6}, @IFLA_GRE_LOCAL={0x8, 0x6, @dev={0xac, 0x14, 0x14, 0x27}}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x5}, @IFLA_GRE_TOS={0x5, 0x9, 0xb5}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x4}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) sendmmsg$inet(r0, &(0x7f0000000300)=[{{&(0x7f00000002c0)={0x2, 0x4e23, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @remote}}}], 0x20}}], 0x1, 0x40000) 232.128608ms ago: executing program 0 (id=12033): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000180), 0x4) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000040)={@broadcast, @multicast1, 0x1, "0d5011f02b7fab96e0aa834d3a9e7cfc12178ac0ab1e6227c2b6ddaa5effda90", 0x5, 0x16, 0xfffffffe, 0x1}, 0x3c) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000000)={@broadcast, @multicast1, 0x0, "12ceaac82ab7d944e84b6fbd6178697e3b10c9b81bede26c85ee73daab4158e8", 0x2, 0x6, 0x4, 0x4}, 0x3c) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f0000000100)=0xe, 0x4) 182.186252ms ago: executing program 4 (id=12034): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$MAP_CREATE_CONST_STR(0x8001000000000000, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000880010001"], 0x48) r0 = getpid() r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) 175.864628ms ago: executing program 2 (id=12035): bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f0000000080), 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x8, @mcast1, 0x7, 0xffffffff}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000780)="f4000900062b2f25fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b400", 0x534}], 0x1}, 0x0) 130.486694ms ago: executing program 0 (id=12036): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r1) sendmsg$nl_route(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000c40)=@newlinkprop={0x100, 0x6c, 0x8, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x40, 0x2}, [@IFLA_VF_PORTS={0xe0, 0x18, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x1}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "118c5f2b18399f6a57f6984d2b1bf795"}, @IFLA_PORT_PROFILE={0x8, 0x2, 'GPL\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x6, 0x2, '%\x00'}, @IFLA_PORT_VF={0x8, 0x1, 0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "553d63e80cf783b3e30ac007c806aaf9"}]}, {0x50, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0x9}, @IFLA_PORT_PROFILE={0xe, 0x2, 'q\xb1\xff\xcdd\xb7*C\xed\xca'}, @IFLA_PORT_VF={0x8, 0x1, 0x5}, @IFLA_PORT_PROFILE={0x6, 0x2, '&\x00'}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x77}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "837b0e150d3b5eb58950d697d668c869"}, @IFLA_PORT_PROFILE={0x5, 0x2, '\x00'}]}, {0x38, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x8}, @IFLA_PORT_PROFILE={0xd, 0x2, 'skcipher\x00'}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "673ab81899a9e2e6ad4bc1467334daa0"}, @IFLA_PORT_PROFILE={0x6, 0x2, '\xf0\x00'}]}]}]}, 0x100}, 0x1, 0x0, 0x0, 0xdc3bfd38b150b2d2}, 0x0) 125.181258ms ago: executing program 1 (id=12037): sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001140)=ANY=[@ANYBLOB="140000", @ANYRES16, @ANYBLOB="a90d0100000000000000ef11f3c90ed7000005000000bdb26ec500001247c807662b5203fd5b7eae7a0b9e47a35e1b0cb39d6dcf134f21139356778f"], 0x14}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000140)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, 0x0, &(0x7f0000001040)) 113.940387ms ago: executing program 3 (id=12038): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000740)={0x0, 0x2, 0x0, 0x20b7ee}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x13, r0, 0x7ca8e000) writev(r1, &(0x7f0000000080)=[{0x0}], 0x1) 5.22622ms ago: executing program 1 (id=12039): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)={0x30, r2, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x157c}]]}, 0x30}}, 0x4040) 0s ago: executing program 2 (id=12040): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000740)="5986c661ebb42bfa6464cb14c75e9cfcd0c87d963c5f79227680b88d91ffce97afa404ce506c636d7edc5e22087a65633b94cdee29d97975aa7905b64cc8a1da29c7b4228fe35f3cf9351e377acfcce4079803e636b37d253db4084bbaa03972917794b87e398d654c7970b8d907ea25c42b466116c0100a456e897e59ef282d4165978c7526052d23a08264e673d53a443022bd4e5fb0d2e8f8cd56f16de1e4422331fba2f084a61ea3ef4b71e9c72f", 0xb0}, {&(0x7f0000000280)="1e25e80382bd1827bdc3f0fceccd579926a015127aa1976a5c33e96aeef6851a1b8f9d374b63e964057cdbce25017982ae54f374fe612cd9b1d538a0da89711c177750e23274fb6b86bf86ca307beef221e5b04445fbf8d2d72547a7b61915849eee34e5d637c40fd036e69c61b3110c9107895c3666a6be717dee1cf6cb144727efc7e284b75b2fc9ce3d39beddc7c3c1087cedf8dc0c905cdec76ff8fc0604efbd4c96ff5d0474c35aa339df54f4db", 0xb0}], 0x2, 0x0, 0x0, 0x40}], 0x1, 0x0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2, 0x0, 0x0, 0xf5000000}, 0x0) kernel console output (not intermixed with test programs): as an invalid length. [ 203.439238][T14314] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4076'. [ 203.890874][T14353] netlink: 'syz.2.4093': attribute type 1 has an invalid length. [ 204.003261][T14359] netlink: 'syz.1.4095': attribute type 2 has an invalid length. [ 204.127630][T14370] netlink: 'syz.1.4102': attribute type 7 has an invalid length. [ 204.175007][T14375] xt_policy: output policy not valid in PREROUTING and INPUT [ 204.292858][T14385] openvswitch: netlink: IP tunnel attribute has 30 unknown bytes. [ 204.294691][T14382] netlink: 'syz.1.4109': attribute type 1 has an invalid length. [ 205.014609][T14432] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4134'. [ 205.181853][T14443] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4139'. [ 205.214564][T14443] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4139'. [ 205.247346][T14448] ip6t_srh: unknown srh match flags 5F28 [ 205.561791][T14474] netlink: 'syz.4.4154': attribute type 21 has an invalid length. [ 205.583204][T14474] IPv6: NLM_F_CREATE should be specified when creating new route [ 205.687289][T14482] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 205.970466][T14505] bridge0: port 3(gretap0) entered blocking state [ 205.986390][T14505] bridge0: port 3(gretap0) entered disabled state [ 205.993026][T14505] gretap0: entered allmulticast mode [ 206.013292][T14505] gretap0: entered promiscuous mode [ 206.023277][T14505] bridge0: port 3(gretap0) entered blocking state [ 206.029863][T14505] bridge0: port 3(gretap0) entered listening state [ 206.139657][T14520] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4175'. [ 206.170871][T14521] x_tables: duplicate underflow at hook 3 [ 206.360747][T14538] netlink: 'syz.2.4186': attribute type 1 has an invalid length. [ 206.378678][T14538] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4186'. [ 206.516470][T14551] netlink: 'syz.3.4193': attribute type 1 has an invalid length. [ 206.541364][T14551] netlink: 96 bytes leftover after parsing attributes in process `syz.3.4193'. [ 206.574593][T14551] netlink: 658 bytes leftover after parsing attributes in process `syz.3.4193'. [ 206.608391][T14551] netlink: 1 bytes leftover after parsing attributes in process `syz.3.4193'. [ 206.721952][T14562] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 206.806916][T14569] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4202'. [ 207.063219][T14591] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 207.176597][T14599] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.202195][T14599] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.382437][T14613] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 207.602708][T14632] netlink: 'syz.1.4228': attribute type 10 has an invalid length. [ 207.652173][T14632] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4228'. [ 207.778980][T14642] netlink: 80 bytes leftover after parsing attributes in process `syz.0.4235'. [ 207.806893][T14642] netlink: 80 bytes leftover after parsing attributes in process `syz.0.4235'. [ 207.893446][T14654] openvswitch: netlink: Flow actions attr not present in new flow. [ 208.362687][T14693] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 208.464325][T14698] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 208.638263][T14712] netlink: 'syz.3.4268': attribute type 3 has an invalid length. [ 208.684551][T14712] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4268'. [ 208.946550][T14738] netlink: 'syz.2.4281': attribute type 5 has an invalid length. [ 209.129388][T14751] netlink: 'syz.4.4289': attribute type 4 has an invalid length. [ 209.556444][T14787] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 209.871928][T14808] netlink: 'syz.0.4315': attribute type 1 has an invalid length. [ 209.893513][T14813] netlink: 'syz.4.4316': attribute type 1 has an invalid length. [ 210.003518][T14824] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 2, id = 0 [ 210.117969][T14829] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 210.491326][T14860] netlink: 'syz.2.4339': attribute type 1 has an invalid length. [ 210.980369][T14901] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 210.987659][T14901] IPv6: NLM_F_CREATE should be set when creating new route [ 210.994939][T14901] IPv6: NLM_F_CREATE should be set when creating new route [ 211.129265][T14916] netlink: 'syz.4.4367': attribute type 21 has an invalid length. [ 211.150161][T14916] IPv6: NLM_F_CREATE should be specified when creating new route [ 211.197489][T14919] delete_channel: no stack [ 211.430623][T14941] __nla_validate_parse: 8 callbacks suppressed [ 211.430643][T14941] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.4379'. [ 211.446509][T14941] bridge: RTM_NEWNEIGH with invalid state 0x1 [ 211.625489][T14953] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4385'. [ 212.005108][T14987] openvswitch: netlink: IP tunnel dst address not specified [ 212.054589][T14993] netlink: 'syz.3.4405': attribute type 24 has an invalid length. [ 212.208122][T15001] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 212.376087][T15018] netlink: 3648 bytes leftover after parsing attributes in process `syz.3.4417'. [ 212.400082][T15018] netlink: 3648 bytes leftover after parsing attributes in process `syz.3.4417'. [ 212.528676][T15031] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4424'. [ 212.735044][T15047] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4433'. [ 212.744140][T15047] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4433'. [ 212.753155][T15047] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4433'. [ 213.151346][T15077] bond2: Unable to set peer notification delay as MII monitoring is disabled [ 213.173333][T15077] bond2 (unregistering): Released all slaves [ 213.993649][T15150] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.4480'. [ 214.267604][T15171] netlink: 'syz.2.4491': attribute type 7 has an invalid length. [ 214.292568][T15171] netlink: 'syz.2.4491': attribute type 8 has an invalid length. [ 214.384587][T15178] netlink: 'syz.4.4496': attribute type 6 has an invalid length. [ 214.666778][T15206] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 214.864028][T15218] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4516'. [ 214.990091][T15228] netlink: 'syz.1.4523': attribute type 2 has an invalid length. [ 215.008278][T15228] netlink: 'syz.1.4523': attribute type 11 has an invalid length. [ 215.320272][T15252] SET target dimension over the limit! [ 215.523425][T15268] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 215.860509][T15298] --map-set only usable from mangle table [ 215.919393][T15303] netlink: 'syz.1.4559': attribute type 1 has an invalid length. [ 216.647929][T15363] __nla_validate_parse: 1 callbacks suppressed [ 216.647950][T15363] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4585'. [ 216.956092][T15386] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 217.033401][T15394] netlink: 80 bytes leftover after parsing attributes in process `syz.2.4598'. [ 217.047979][T15392] openvswitch: netlink: Missing key (keys=40, expected=80) [ 217.213370][T15410] xt_l2tp: invalid flags combination: 8 [ 217.316689][T15413] netlink: 'syz.4.4610': attribute type 2 has an invalid length. [ 217.638925][T15441] netlink: 808 bytes leftover after parsing attributes in process `syz.0.4624'. [ 217.706156][T15448] netlink: 232 bytes leftover after parsing attributes in process `syz.1.4626'. [ 217.734983][T15450] Cannot find set identified by id 65534 to match [ 218.392631][T15508] netlink: 'syz.1.4656': attribute type 11 has an invalid length. [ 218.637011][T15527] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4664'. [ 218.663432][T15527] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4664'. [ 218.906542][T15546] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4675'. [ 219.165567][T15562] netdevsim netdevsim2: Firmware load for '..' refused, path contains '..' component [ 219.377250][T15572] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 219.410983][T15574] netlink: 'syz.4.4689': attribute type 10 has an invalid length. [ 219.714302][T15586] openvswitch: netlink: Unexpected mask (mask=200840, allowed=10048) [ 219.861912][T15598] set match dimension is over the limit! [ 219.869865][T15601] x_tables: unsorted entry at hook 2 [ 219.947405][T15606] netlink: 'syz.3.4704': attribute type 21 has an invalid length. [ 219.958422][T15605] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 219.973832][T15606] netlink: 'syz.3.4704': attribute type 6 has an invalid length. [ 219.992883][T15605] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 220.005186][T15606] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4704'. [ 220.252931][T15626] netlink: zone id is out of range [ 220.270504][T15626] netlink: zone id is out of range [ 220.292803][T15626] netlink: zone id is out of range [ 220.299047][T15626] netlink: zone id is out of range [ 220.311088][T15626] netlink: zone id is out of range [ 220.319168][T15626] netlink: zone id is out of range [ 220.326675][T15626] netlink: zone id is out of range [ 220.430656][T15638] netlink: 'syz.3.4720': attribute type 1 has an invalid length. [ 220.445959][T15642] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4722'. [ 220.457901][T15638] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4720'. [ 221.230291][T15703] bond0: entered promiscuous mode [ 221.285052][T15708] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 221.549548][T15733] netlink: 'syz.4.4763': attribute type 30 has an invalid length. [ 221.665536][ C0] bridge0: port 3(gretap0) entered learning state [ 221.707255][T15743] bridge2: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 221.757873][T15747] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 221.861746][T15755] Unsupported ieee802154 address type: 0 [ 222.230837][T15785] Cannot find add_set index 2 as target [ 222.314369][T15793] net_ratelimit: 4 callbacks suppressed [ 222.314388][T15793] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 222.447536][T15802] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 222.559938][T15811] netlink: 'syz.1.4804': attribute type 1 has an invalid length. [ 222.983067][T15845] netlink: 'syz.2.4821': attribute type 2 has an invalid length. [ 223.001510][T15845] netlink: 'syz.2.4821': attribute type 2 has an invalid length. [ 223.048140][T15847] __nla_validate_parse: 2 callbacks suppressed [ 223.048159][T15847] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4822'. [ 223.076313][T15847] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4822'. [ 223.092147][T15847] geneve3: entered promiscuous mode [ 223.097576][T15847] geneve3: entered allmulticast mode [ 223.744247][T15904] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4849'. [ 223.792573][T15907] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4852'. [ 223.809403][T15907] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4852'. [ 224.431458][T15942] netlink: 'syz.0.4869': attribute type 12 has an invalid length. [ 224.816079][T15956] netlink: 7064 bytes leftover after parsing attributes in process `syz.2.4877'. [ 224.825847][T15956] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 225.093016][T15979] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4887'. [ 225.227048][T15988] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4891'. [ 225.268150][T15988] 8021q: adding VLAN 0 to HW filter on device bond2 [ 225.321758][T15997] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4896'. [ 225.600582][T16021] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 225.762735][T16033] openvswitch: netlink: VXLAN extension 78 out of range max 1 [ 225.797675][T16039] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4915'. [ 226.678107][T16107] xt_CT: You must specify a L4 protocol and not use inversions on it [ 226.810779][T16118] netlink: 'syz.2.4956': attribute type 4 has an invalid length. [ 227.634282][T16188] netdevsim netdevsim2: Direct firmware load for .. @ failed with error -2 [ 227.658469][T16188] netdevsim netdevsim2: Falling back to sysfs fallback for: .. @ [ 227.840516][T16200] bond2: entered promiscuous mode [ 227.852111][T16200] bond2: entered allmulticast mode [ 227.859974][T16200] 8021q: adding VLAN 0 to HW filter on device bond2 [ 227.897873][T16204] bond2: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 227.909889][T16204] bond2 (unregistering): Released all slaves [ 228.041491][T16219] netlink: 'syz.4.5006': attribute type 1 has an invalid length. [ 228.146034][T16225] xt_CONNSECMARK: invalid mode: 0 [ 228.394686][T16237] __nla_validate_parse: 3 callbacks suppressed [ 228.394704][T16237] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5014'. [ 228.780389][T16257] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5024'. [ 229.261521][T16292] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5042'. [ 229.409202][T16303] netlink: 'syz.0.5045': attribute type 1 has an invalid length. [ 229.711077][T16328] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5059'. [ 229.745135][T16328] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5059'. [ 229.754167][T16328] netlink: 31 bytes leftover after parsing attributes in process `syz.0.5059'. [ 229.781624][T16334] netlink: 'syz.1.5062': attribute type 1 has an invalid length. [ 229.790034][T16328] netlink: 'syz.0.5059': attribute type 3 has an invalid length. [ 229.813171][T16328] netlink: 'syz.0.5059': attribute type 2 has an invalid length. [ 229.817413][T16334] netlink: 244 bytes leftover after parsing attributes in process `syz.1.5062'. [ 229.831651][T16328] netlink: 31 bytes leftover after parsing attributes in process `syz.0.5059'. [ 229.993673][T16350] netlink: 'syz.1.5069': attribute type 27 has an invalid length. [ 230.212938][T16369] SET target dimension over the limit! [ 230.710301][T16409] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048) [ 231.104201][T16444] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5116'. [ 231.684238][T16488] netlink: 256 bytes leftover after parsing attributes in process `syz.4.5138'. [ 232.762514][T16576] netlink: 'syz.3.5183': attribute type 2 has an invalid length. [ 232.803028][T16576] 9: entered promiscuous mode [ 233.118707][T16609] netlink: 'syz.1.5196': attribute type 2 has an invalid length. [ 233.140120][T16606] bond3 (unregistering): Released all slaves [ 233.417666][T16631] openvswitch: netlink: IPv4 tun info is not correct [ 233.947920][T16674] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 234.170373][T16693] netlink: 'syz.1.5240': attribute type 1 has an invalid length. [ 234.181258][T16693] __nla_validate_parse: 2 callbacks suppressed [ 234.182203][T16693] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5240'. [ 234.677558][T16734] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5259'. [ 234.686723][T16734] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5259'. [ 234.839375][T16745] wg1 speed is unknown, defaulting to 1000 [ 234.866239][T16745] wg1 speed is unknown, defaulting to 1000 [ 234.885302][T16745] wg1 speed is unknown, defaulting to 1000 [ 234.939969][T16745] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 235.004389][T16745] wg1 speed is unknown, defaulting to 1000 [ 235.040367][T16745] wg1 speed is unknown, defaulting to 1000 [ 235.066251][T16745] wg1 speed is unknown, defaulting to 1000 [ 235.073954][T16745] wg1 speed is unknown, defaulting to 1000 [ 235.117206][T16745] wg1 speed is unknown, defaulting to 1000 [ 235.379924][T16777] netlink: 'syz.0.5280': attribute type 13 has an invalid length. [ 235.414883][T16777] gretap0: refused to change device tx_queue_len [ 235.421581][T16777] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 235.457249][T16780] netlink: 232 bytes leftover after parsing attributes in process `syz.2.5281'. [ 235.832001][T16812] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 236.238242][T16836] netlink: 256 bytes leftover after parsing attributes in process `syz.2.5308'. [ 236.574663][T16851] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5314'. [ 236.814027][T16865] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 236.832243][T16865] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 236.841334][T16865] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 237.024580][ C0] bridge0: port 3(gretap0) entered forwarding state [ 237.031221][ C0] bridge0: topology change detected, propagating [ 237.392364][T16914] netlink: 248 bytes leftover after parsing attributes in process `syz.4.5345'. [ 237.405685][T16913] IPv6: NLM_F_CREATE should be specified when creating new route [ 237.666641][T16932] netlink: 248 bytes leftover after parsing attributes in process `syz.2.5353'. [ 237.961581][T16953] netlink: 228 bytes leftover after parsing attributes in process `syz.1.5364'. [ 238.239247][T16975] x9: renamed from bridge_slave_0 (while UP) [ 238.340810][T16984] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5380'. [ 238.998440][T17038] openvswitch: netlink: IP tunnel dst address not specified [ 239.382027][T17068] __nla_validate_parse: 1 callbacks suppressed [ 239.382045][T17068] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5418'. [ 239.538816][T17081] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5424'. [ 239.828310][T17106] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5437'. [ 239.933225][T17116] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 240.414371][T17153] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5460'. [ 240.481079][T17157] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5462'. [ 240.938231][T17190] netlink: 'syz.4.5478': attribute type 1 has an invalid length. [ 240.955453][T17190] netlink: 228 bytes leftover after parsing attributes in process `syz.4.5478'. [ 241.146743][T17145] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 241.499062][T17226] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 241.522186][T17228] netlink: 'syz.2.5497': attribute type 3 has an invalid length. [ 241.667253][T17242] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 241.818309][T17253] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 241.972059][T17266] netlink: 'syz.4.5516': attribute type 1 has an invalid length. [ 242.243779][T17287] netlink: 404 bytes leftover after parsing attributes in process `syz.0.5527'. [ 242.253164][T17287] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5527'. [ 242.273374][T17287] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5527'. [ 242.282442][T17224] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 242.303370][T17287] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5527'. [ 242.386003][ T5147] Bluetooth: hci1: command 0x0406 tx timeout [ 242.779072][T17329] netlink: get zone limit has 4 unknown bytes [ 242.983812][T17348] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 243.040444][T17352] ip6t_srh: unknown srh invflags 4000 [ 244.399246][T17453] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 245.409556][T17532] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 245.557967][T17544] __nla_validate_parse: 4 callbacks suppressed [ 245.557986][T17544] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5651'. [ 245.610435][T17548] ip6tnl2: entered allmulticast mode [ 245.628629][T17551] tunl0: entered promiscuous mode [ 245.646022][T17551] netlink: 'syz.4.5656': attribute type 3 has an invalid length. [ 245.674248][T17551] netlink: 9 bytes leftover after parsing attributes in process `syz.4.5656'. [ 245.769058][T17559] dvmrp0: entered allmulticast mode [ 245.853764][T17564] bond4: option miimon: invalid value (18446744073709551585) [ 245.861715][T17564] bond4: option miimon: allowed values 0 - 2147483647 [ 245.900238][T17564] bond4 (unregistering): Released all slaves [ 246.312723][T17587] netlink: 256 bytes leftover after parsing attributes in process `syz.2.5672'. [ 246.325556][T17591] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5675'. [ 246.846631][T17623] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5691'. [ 247.104652][T17645] nbd: couldn't find a device at index 1048580 [ 247.639069][T17693] netlink: 80 bytes leftover after parsing attributes in process `syz.4.5725'. [ 247.766984][T17701] openvswitch: netlink: IP tunnel TTL not specified. [ 247.835396][T17707] SET target dimension over the limit! [ 247.868377][T17711] netlink: 'syz.0.5734': attribute type 3 has an invalid length. [ 248.012298][T17723] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5738'. [ 248.050004][T17727] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 248.356250][T17749] openvswitch: netlink: Tunnel attr 78 out of range max 16 [ 248.501039][T17764] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5761'. [ 248.986808][T17804] netlink: 'syz.3.5779': attribute type 4 has an invalid length. [ 249.078812][T17808] IPv6: NLM_F_CREATE should be specified when creating new route [ 249.559572][T17851] xfrm1: entered allmulticast mode [ 249.574160][T17853] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5800'. [ 249.594623][T17853] netlink: 21 bytes leftover after parsing attributes in process `syz.3.5800'. [ 249.717351][T17862] openvswitch: netlink: Unexpected mask (mask=201040, allowed=10048) [ 249.850570][T17873] netlink: 'syz.1.5811': attribute type 2 has an invalid length. [ 250.074827][T17885] netlink: 'syz.1.5816': attribute type 11 has an invalid length. [ 250.568182][T17924] xt_addrtype: ipv6 does not support BROADCAST matching [ 250.597576][T17927] __nla_validate_parse: 1 callbacks suppressed [ 250.597594][T17927] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5837'. [ 250.605323][T17925] openvswitch: netlink: IP tunnel dst address not specified [ 250.908182][T17951] netlink: 'syz.2.5851': attribute type 8 has an invalid length. [ 251.087675][T17965] bond4: option fail_over_mac: invalid value (16) [ 251.099797][T17965] bond4 (unregistering): Released all slaves [ 251.130474][T17970] netlink: 'syz.1.5858': attribute type 10 has an invalid length. [ 251.170779][T17972] netlink: 'syz.3.5859': attribute type 3 has an invalid length. [ 251.359241][T17983] openvswitch: netlink: Flow key attribute not present in set flow. [ 251.740742][T18014] netlink: 'syz.1.5877': attribute type 4 has an invalid length. [ 251.774462][T18014] netlink: 152 bytes leftover after parsing attributes in process `syz.1.5877'. [ 251.824665][T18014] .`: renamed from bond0 (while UP) [ 251.892741][T18019] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5882'. [ 252.113277][T18036] netlink: 'syz.2.5889': attribute type 4 has an invalid length. [ 252.141144][T18042] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 252.668752][T18084] : renamed from hsr0 [ 252.827000][T18092] sctp: [Deprecated]: syz.4.5918 (pid 18092) Use of int in maxseg socket option. [ 252.827000][T18092] Use struct sctp_assoc_value instead [ 252.973709][T18100] netlink: 'syz.3.5922': attribute type 2 has an invalid length. [ 253.008701][T18100] v: entered promiscuous mode [ 253.112206][T18110] netlink: 'syz.0.5927': attribute type 10 has an invalid length. [ 253.131287][T18110] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5927'. [ 253.140706][T18110] dummy0: entered promiscuous mode [ 253.146750][T18110] bridge0: port 3(dummy0) entered blocking state [ 253.153339][T18110] bridge0: port 3(dummy0) entered disabled state [ 253.155968][T18116] nftables ruleset with unbound chain [ 253.162360][T18110] dummy0: entered allmulticast mode [ 253.452867][T18134] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5934'. [ 253.619163][ T24] IPVS: starting estimator thread 0... [ 253.679286][T18151] IPv6: sit1: Disabled Multicast RS [ 253.727149][T18147] IPVS: using max 33 ests per chain, 79200 per kthread [ 253.873299][T18169] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5955'. [ 254.502497][T18221] netlink: 'syz.0.5982': attribute type 1 has an invalid length. [ 254.834688][T18245] netlink: 'syz.1.5992': attribute type 1 has an invalid length. [ 254.844782][T18243] netlink: 516 bytes leftover after parsing attributes in process `syz.4.5991'. [ 254.854997][T18245] netlink: 'syz.1.5992': attribute type 2 has an invalid length. [ 255.441547][T18290] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6009'. [ 255.502730][T18290] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6009'. [ 255.589854][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.718518][T18310] openvswitch: netlink: IPv4 tun info is not correct [ 256.208434][T18346] xt_hashlimit: size too large, truncated to 1048576 [ 256.321086][T18355] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6038'. [ 256.701490][T18387] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 256.752813][T18389] netlink: 144 bytes leftover after parsing attributes in process `syz.2.6052'. [ 256.810295][T18391] ipt_ECN: cannot use operation on non-tcp rule [ 256.824094][T18394] SET target dimension over the limit! [ 256.869498][T18396] netlink: 'syz.0.6056': attribute type 21 has an invalid length. [ 256.912567][T18399] netlink: 'syz.2.6057': attribute type 1 has an invalid length. [ 256.920490][T18399] netlink: 96 bytes leftover after parsing attributes in process `syz.2.6057'. [ 256.930165][T18399] netlink: 658 bytes leftover after parsing attributes in process `syz.2.6057'. [ 256.939695][T18399] netlink: 1 bytes leftover after parsing attributes in process `syz.2.6057'. [ 257.243775][T18421] netlink: 'syz.1.6069': attribute type 1 has an invalid length. [ 257.275414][T18421] netlink: 476 bytes leftover after parsing attributes in process `syz.1.6069'. [ 257.322424][T18421] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.6069'. [ 257.452652][T18439] openvswitch: netlink: Unexpected mask (mask=4000040, allowed=10048) [ 257.570560][T18449] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6079'. [ 257.600255][T18449] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6079'. [ 257.812775][T18463] nft_compat: unsupported protocol 0 [ 258.125853][T18489] netlink: 'syz.4.6100': attribute type 5 has an invalid length. [ 258.343769][T18509] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6110'. [ 258.979211][T18560] netlink: 'syz.0.6136': attribute type 1 has an invalid length. [ 259.098085][T18569] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 259.613884][T18615] openvswitch: netlink: Tunnel attr 16 has unexpected len 20 expected 0 [ 260.074862][T18652] netlink: 'syz.0.6182': attribute type 9 has an invalid length. [ 260.082633][T18652] netlink: 'syz.0.6182': attribute type 6 has an invalid length. [ 260.241422][T18667] netlink: 'syz.4.6190': attribute type 1 has an invalid length. [ 260.645932][T18701] netlink: 'syz.3.6206': attribute type 28 has an invalid length. [ 260.664153][T18701] netlink: 'syz.3.6206': attribute type 3 has an invalid length. [ 260.669955][T18704] netlink: 'syz.0.6208': attribute type 1 has an invalid length. [ 261.097001][T18736] netlink: 'syz.0.6223': attribute type 16 has an invalid length. [ 261.109519][T18736] netlink: 'syz.0.6223': attribute type 3 has an invalid length. [ 261.907233][T18807] __nla_validate_parse: 5 callbacks suppressed [ 261.907252][T18807] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6258'. [ 261.909215][T18805] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6257'. [ 261.916947][T18807] openvswitch: netlink: Unknown nsh attribute 0 [ 261.930496][T18805] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6257'. [ 261.995146][T18805] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6257'. [ 262.552704][T18860] tc_dump_action: action bad kind [ 262.799415][T18880] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6292'. [ 262.812419][T18875] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 262.917918][T18885] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 263.254692][T18915] xt_TCPMSS: Only works on TCP SYN packets [ 263.293011][T18916] delete_channel: no stack [ 263.484880][T18936] Bluetooth: MGMT ver 1.23 [ 263.584815][T18943] Cannot find map_set index 65533 as target [ 264.538770][T19020] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6361'. [ 264.618114][T19026] netlink: 168 bytes leftover after parsing attributes in process `syz.3.6365'. [ 265.156407][T19063] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 265.434273][T19081] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6390'. [ 265.645524][T19100] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6399'. [ 265.780595][T19111] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6404'. [ 266.049793][T19126] delete_channel: no stack [ 267.044289][T19198] Bluetooth: MGMT ver 1.23 [ 267.081316][T19204] __nla_validate_parse: 5 callbacks suppressed [ 267.081333][T19204] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6446'. [ 267.236963][T19213] validate_nla: 2 callbacks suppressed [ 267.236981][T19213] netlink: 'syz.4.6451': attribute type 3 has an invalid length. [ 267.294556][T19213] netlink: 766 bytes leftover after parsing attributes in process `syz.4.6451'. [ 267.362142][T19224] IPVS: length: 8 != 1152 [ 267.920726][T19268] netlink: 'syz.4.6472': attribute type 11 has an invalid length. [ 267.954596][T19268] netlink: 199788 bytes leftover after parsing attributes in process `syz.4.6472'. [ 268.097921][T19278] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6479'. [ 268.324654][T19296] IPVS: ip_vs_edit_dest(): server weight less than zero [ 268.334693][ T24] IPVS: starting estimator thread 0... [ 268.425702][T19297] IPVS: using max 36 ests per chain, 86400 per kthread [ 268.968560][T19349] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6513'. [ 269.494187][T19388] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6532'. [ 269.716869][T19402] tipc: Failed to obtain node identity [ 269.724498][T19402] tipc: Enabling of bearer rejected, failed to enable media [ 270.319843][T19445] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 270.392881][T19451] Zero length message leads to an empty skb [ 270.509005][T19458] netlink: 'syz.1.6566': attribute type 1 has an invalid length. [ 271.378936][T19528] netlink: 'syz.3.6599': attribute type 11 has an invalid length. [ 272.124218][T19584] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6625'. [ 272.218030][T19588] : entered promiscuous mode [ 272.328220][T19601] netlink: 256 bytes leftover after parsing attributes in process `syz.0.6635'. [ 272.348830][T19602] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6634'. [ 272.562250][T19620] macsec1: entered promiscuous mode [ 272.584833][T19620] batadv0: entered promiscuous mode [ 272.591448][T19620] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 272.634692][T19620] batadv0: left promiscuous mode [ 272.682803][T19624] tipc: Enabling of bearer rejected, failed to enable media [ 273.195526][T19661] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 573 [ 273.495639][T19680] block nbd0: not configured, cannot reconfigure [ 273.696914][T19694] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 273.828341][T19704] netlink: 272 bytes leftover after parsing attributes in process `syz.1.6685'. [ 274.329462][T19744] : entered promiscuous mode [ 274.911748][T19793] netlink: 'syz.3.6722': attribute type 29 has an invalid length. [ 274.949080][T19793] netlink: 'syz.3.6722': attribute type 29 has an invalid length. [ 275.163012][T19809] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6728'. [ 275.320514][T19822] netlink: 248 bytes leftover after parsing attributes in process `syz.4.6734'. [ 275.331216][T19823] bond3: (slave bond_slave_1): Device is not bonding slave [ 275.338664][T19823] bond3: option active_slave: invalid value (bond_slave_1) [ 275.349351][T19822] netlink: 52 bytes leftover after parsing attributes in process `syz.4.6734'. [ 275.370903][T19823] bond3 (unregistering): Released all slaves [ 276.013264][T19874] raw_sendmsg: syz.0.6758 forgot to set AF_INET. Fix it! [ 276.407291][T19906] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.6772'. [ 276.791780][T19939] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6789'. [ 276.848005][T19942] netlink: 'syz.1.6791': attribute type 4 has an invalid length. [ 276.876220][T19948] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6794'. [ 276.972920][T19952] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 276.988564][T19952] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 277.266781][T19978] netlink: 'syz.1.6807': attribute type 1 has an invalid length. [ 277.675661][T20011] __nla_validate_parse: 1 callbacks suppressed [ 277.675679][T20011] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6825'. [ 277.692995][T20011] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6825'. [ 278.258415][T20057] xt_l2tp: wrong L2TP version: 0 [ 278.426319][T20067] sctp: [Deprecated]: syz.2.6850 (pid 20067) Use of int in max_burst socket option deprecated. [ 278.426319][T20067] Use struct sctp_assoc_value instead [ 278.735485][T20089] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 279.149630][T20123] pim6reg527: entered allmulticast mode [ 279.358487][T20139] pimreg3: entered allmulticast mode [ 279.388589][T20146] veth1_macvtap: left promiscuous mode [ 279.394160][T20146] macsec0: entered promiscuous mode [ 279.399499][T20146] macsec0: entered allmulticast mode [ 279.411785][T20146] veth1_macvtap: entered promiscuous mode [ 279.421709][T20146] veth1_macvtap: entered allmulticast mode [ 279.431155][T20146] macsec0: left promiscuous mode [ 279.436337][T20146] macsec0: left allmulticast mode [ 279.441463][T20146] veth1_macvtap: left allmulticast mode [ 279.557744][T20154] netlink: 'syz.4.6891': attribute type 29 has an invalid length. [ 279.748602][T20174] Bluetooth: MGMT ver 1.23 [ 280.020150][T20196] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6908'. [ 280.049705][T20196] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6908'. [ 280.072999][T20198] sctp: [Deprecated]: syz.3.6911 (pid 20198) Use of struct sctp_assoc_value in delayed_ack socket option. [ 280.072999][T20198] Use struct sctp_sack_info instead [ 280.130466][T20203] sctp: [Deprecated]: syz.3.6911 (pid 20203) Use of struct sctp_assoc_value in delayed_ack socket option. [ 280.130466][T20203] Use struct sctp_sack_info instead [ 280.341486][T20218] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 280.380380][T20222] netlink: 'syz.0.6922': attribute type 32 has an invalid length. [ 280.389688][T20222] netlink: 776 bytes leftover after parsing attributes in process `syz.0.6922'. [ 280.465903][T20227] veth0_to_bridge: vlans aren't supported yet for dev_uc|mc_add() [ 280.955091][T20264] netlink: 'syz.0.6944': attribute type 11 has an invalid length. [ 280.965378][T20264] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.6944'. [ 281.092598][T20275] netlink: 'syz.4.6949': attribute type 12 has an invalid length. [ 281.260585][T20287] netlink: 'syz.0.6955': attribute type 1 has an invalid length. [ 281.291961][T20287] netlink: 'syz.0.6955': attribute type 2 has an invalid length. [ 281.303807][T20287] netlink: 'syz.0.6955': attribute type 1 has an invalid length. [ 281.315301][T20287] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6955'. [ 281.740750][T20324] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 281.880017][T20335] xt_l2tp: missing protocol rule (udp|l2tpip) [ 282.555838][T20381] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6997'. [ 282.598042][T20381] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6997'. [ 282.983662][T20411] netlink: 165 bytes leftover after parsing attributes in process `syz.4.7013'. [ 283.092978][T20414] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 283.214013][T20424] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7018'. [ 283.240385][T20428] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7020'. [ 283.353577][T20436] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7025'. [ 283.572977][T20455] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7032'. [ 283.617574][T20459] netlink: 'syz.0.7034': attribute type 23 has an invalid length. [ 283.820226][T20474] netlink: 256 bytes leftover after parsing attributes in process `syz.2.7043'. [ 285.112758][T20561] xt_HMARK: proto mask must be zero with L3 mode [ 285.642323][T20583] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7095'. [ 285.659575][T20587] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7099'. [ 285.745780][ T73] wlan1: Trigger new scan to find an IBSS to join [ 285.944127][T20607] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 286.739193][T20670] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7135'. [ 286.750419][T20670] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7135'. [ 286.794208][T20666] bond0: left promiscuous mode [ 286.926806][T20666] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 286.975199][T20666] veth3: left promiscuous mode [ 286.980022][T20666] veth3: left allmulticast mode [ 286.987707][T20666] geneve2: left promiscuous mode [ 286.992663][T20666] geneve2: left allmulticast mode [ 287.030647][T20666] ip6gre1: left allmulticast mode [ 287.043924][T20679] netlink: 'syz.1.7139': attribute type 25 has an invalid length. [ 287.064289][ T1113] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.074700][ T1113] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0 [ 287.097086][ T1113] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.134634][ T1113] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0 [ 287.154656][ T1113] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.200314][ T1113] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0 [ 287.227144][ T1113] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.243899][T20694] netlink: 'syz.3.7150': attribute type 2 has an invalid length. [ 287.252529][ T1113] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0 [ 287.283234][T20699] wireguard: wg2: Could not create IPv4 socket [ 287.559840][T20715] netlink: 'syz.3.7158': attribute type 1 has an invalid length. [ 287.603747][T20715] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 287.807811][T20734] netlink: 'syz.2.7167': attribute type 14 has an invalid length. [ 287.854927][T20734] netlink: 'syz.2.7167': attribute type 13 has an invalid length. [ 288.006363][T20753] __nla_validate_parse: 3 callbacks suppressed [ 288.006383][T20753] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7174'. [ 288.066899][T20755] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7177'. [ 288.160502][T20764] netlink: 'syz.4.7180': attribute type 1 has an invalid length. [ 288.172645][T20765] netlink: 'syz.1.7182': attribute type 2 has an invalid length. [ 288.202609][T20765] netlink: 'syz.1.7182': attribute type 2 has an invalid length. [ 288.636830][T20802] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7200'. [ 288.697458][T20805] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7202'. [ 288.707569][ T2996] wlan1: Trigger new scan to find an IBSS to join [ 288.813715][T20817] netlink: 'syz.4.7208': attribute type 4 has an invalid length. [ 288.822002][T20817] netlink: 224 bytes leftover after parsing attributes in process `syz.4.7208'. [ 288.928243][T20824] netlink: 'syz.0.7211': attribute type 11 has an invalid length. [ 289.094251][ T30] audit: type=1800 audit(1776254073.002:3): pid=20841 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.7218" name="memory.events" dev="tmpfs" ino=7035 res=0 errno=0 [ 289.164545][ T30] audit: type=1804 audit(1776254073.002:4): pid=20841 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.7218" name="/newroot/1401/memory.events" dev="tmpfs" ino=7035 res=1 errno=0 [ 289.353872][T20860] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7227'. [ 289.436935][T20856] IPVS: Scheduler module ip_vs_sip not found [ 289.515254][T20871] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7232'. [ 290.459925][T20949] netlink: 2 bytes leftover after parsing attributes in process `syz.3.7271'. [ 290.518711][T20954] tipc: Enabling of bearer rejected, media not registered [ 290.644659][T20961] vlan0: entered allmulticast mode [ 290.662629][T20961] bond0: entered allmulticast mode [ 290.745604][T20971] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7282'. [ 290.775406][T20971] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7282'. [ 291.432945][T21028] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 291.542197][T21034] netlink: 'syz.2.7313': attribute type 11 has an invalid length. [ 291.745486][ T251] wlan1: Trigger new scan to find an IBSS to join [ 292.170415][T21083] tipc: Started in network mode [ 292.176530][T21083] tipc: Node identity ac141441, cluster identity 4711 [ 292.185705][T21083] tipc: Enabled bearer , priority 10 [ 292.199002][T21084] netlink: 'syz.2.7337': attribute type 29 has an invalid length. [ 292.685546][ T2996] wlan1: Creating new IBSS network, BSSID ca:89:61:3e:e5:65 [ 292.790331][T21136] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 293.315706][ T5961] tipc: Node number set to 2886997057 [ 293.327975][T21173] __nla_validate_parse: 3 callbacks suppressed [ 293.328368][T21173] netlink: 212 bytes leftover after parsing attributes in process `syz.4.7381'. [ 293.448142][T21179] netlink: 104 bytes leftover after parsing attributes in process `syz.4.7385'. [ 293.679202][T21199] netlink: 'syz.4.7394': attribute type 11 has an invalid length. [ 293.692551][T21201] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.7396'. [ 293.703023][T21199] netlink: 'syz.4.7394': attribute type 11 has an invalid length. [ 293.731910][T21199] netlink: 204 bytes leftover after parsing attributes in process `syz.4.7394'. [ 293.829367][T21210] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7399'. [ 293.852703][T21210] tipc: Invalid UDP bearer configuration [ 293.852761][T21210] tipc: Enabling of bearer rejected, failed to enable media [ 294.351616][T21248] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 294.710808][T21269] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7425'. [ 295.100829][T21299] netlink: 204 bytes leftover after parsing attributes in process `syz.2.7439'. [ 295.633163][T21339] netlink: 256 bytes leftover after parsing attributes in process `syz.3.7460'. [ 295.657144][T21339] netlink: 'syz.3.7460': attribute type 9 has an invalid length. [ 295.756923][T21349] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7463'. [ 295.807879][T21352] netlink: 'syz.3.7466': attribute type 13 has an invalid length. [ 295.815935][T21352] macvtap0: entered allmulticast mode [ 295.828780][T21352] macvtap0: refused to change device tx_queue_len [ 296.390778][T21398] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7488'. [ 297.241608][T21469] netlink: 'syz.1.7523': attribute type 1 has an invalid length. [ 297.560092][T21494] netlink: 'syz.4.7535': attribute type 29 has an invalid length. [ 297.584719][T21494] netlink: 'syz.4.7535': attribute type 29 has an invalid length. [ 298.127857][T21535] netlink: 'syz.4.7553': attribute type 2 has an invalid length. [ 299.819337][T21663] netlink: 'syz.1.7614': attribute type 3 has an invalid length. [ 299.895064][T21669] macvlan0: entered promiscuous mode [ 299.948162][T21675] netlink: 'syz.1.7619': attribute type 1 has an invalid length. [ 299.993556][T21675] __nla_validate_parse: 7 callbacks suppressed [ 299.993573][T21675] netlink: 96 bytes leftover after parsing attributes in process `syz.1.7619'. [ 300.020557][T21675] netlink: 1 bytes leftover after parsing attributes in process `syz.1.7619'. [ 300.037130][T21675] netlink: 'syz.1.7619': attribute type 1 has an invalid length. [ 300.047500][T21675] netlink: 'syz.1.7619': attribute type 8 has an invalid length. [ 300.083477][T21675] netlink: 606 bytes leftover after parsing attributes in process `syz.1.7619'. [ 301.002407][T21752] netlink: 96 bytes leftover after parsing attributes in process `syz.1.7656'. [ 301.133842][T21759] netlink: 224 bytes leftover after parsing attributes in process `syz.0.7659'. [ 301.212604][T21761] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7660'. [ 301.252531][T21766] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7661'. [ 301.650862][T21788] netlink: 332 bytes leftover after parsing attributes in process `syz.1.7671'. [ 301.845249][T21801] netlink: 'syz.0.7680': attribute type 3 has an invalid length. [ 301.960020][T21812] vlan2: entered promiscuous mode [ 301.973018][T21812] geneve1: entered promiscuous mode [ 301.978855][T21812] vlan2: entered allmulticast mode [ 301.986876][T21812] geneve1: entered allmulticast mode [ 301.992660][T21816] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7687'. [ 302.004623][T21816] netlink: 176 bytes leftover after parsing attributes in process `syz.3.7687'. [ 302.023851][T21816] netlink: 'syz.3.7687': attribute type 5 has an invalid length. [ 303.133965][T21905] sctp: [Deprecated]: syz.4.7730 (pid 21905) Use of int in maxseg socket option. [ 303.133965][T21905] Use struct sctp_assoc_value instead [ 303.456037][T21930] netlink: 'syz.0.7742': attribute type 2 has an invalid length. [ 303.474686][T21930] netlink: 'syz.0.7742': attribute type 1 has an invalid length. [ 304.426162][T22005] netlink: 'syz.2.7779': attribute type 2 has an invalid length. [ 304.873941][T22033] netlink: 'syz.2.7792': attribute type 1 has an invalid length. [ 305.155735][T22057] vlan1: entered allmulticast mode [ 305.160891][T22057] bridge_slave_0: entered allmulticast mode [ 305.481220][T22081] __nla_validate_parse: 9 callbacks suppressed [ 305.481240][T22081] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7814'. [ 305.658953][T22092] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7821'. [ 305.898028][T22111] netlink: 'syz.0.7829': attribute type 4 has an invalid length. [ 305.989176][T22119] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7831'. [ 306.194333][T22133] netlink: 104 bytes leftover after parsing attributes in process `syz.2.7839'. [ 307.067705][T22199] netlink: 'syz.3.7872': attribute type 58 has an invalid length. [ 307.094622][T22199] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7872'. [ 307.954529][T22269] sock: sock_set_timeout: `syz.2.7905' (pid 22269) tries to set negative timeout [ 308.378084][T22293] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7913'. [ 308.698259][T22319] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7923'. [ 308.810219][T22325] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 308.942951][T22337] netlink: 10 bytes leftover after parsing attributes in process `syz.1.7931'. [ 308.982858][T22335] vlan1: entered promiscuous mode [ 308.998346][T22335] gretap0: entered promiscuous mode [ 309.150669][T22347] netlink: 'syz.4.7935': attribute type 1 has an invalid length. [ 309.180958][T22347] netlink: 232 bytes leftover after parsing attributes in process `syz.4.7935'. [ 309.219521][T22356] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7938'. [ 309.770640][ T251] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 309.778974][ T251] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 309.794676][ T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 309.867875][ T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 309.905369][ T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 310.757420][T22472] __nla_validate_parse: 3 callbacks suppressed [ 310.757438][T22472] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7989'. [ 311.118467][T22499] : entered promiscuous mode [ 311.659779][T22546] netlink: 'syz.3.8027': attribute type 1 has an invalid length. [ 311.680162][T22546] netlink: 96 bytes leftover after parsing attributes in process `syz.3.8027'. [ 311.689563][T22546] netlink: 'syz.3.8027': attribute type 1 has an invalid length. [ 311.701938][T22546] netlink: 'syz.3.8027': attribute type 8 has an invalid length. [ 311.725743][T22546] netlink: 606 bytes leftover after parsing attributes in process `syz.3.8027'. [ 312.054107][T22572] wg1 speed is unknown, defaulting to 1000 [ 312.275540][T22589] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8049'. [ 313.206855][T22664] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8084'. [ 313.227532][T22664] bridge0: entered promiscuous mode [ 313.233176][T22664] macsec1: entered promiscuous mode [ 313.247567][T22664] macsec1: entered allmulticast mode [ 313.252998][T22664] bridge0: entered allmulticast mode [ 313.276697][T22664] bridge0: port 3(macsec1) entered blocking state [ 313.297805][T22664] bridge0: port 3(macsec1) entered disabled state [ 313.365864][T22672] netlink: 'syz.2.8088': attribute type 10 has an invalid length. [ 313.463728][T22664] bridge0: left allmulticast mode [ 313.471209][T22664] bridge0: left promiscuous mode [ 313.696948][T22686] IPVS: Error connecting to the multicast addr [ 313.834729][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 314.173916][T22713] netlink: zone id is out of range [ 314.194831][T22713] netlink: zone id is out of range [ 314.202034][T22713] netlink: zone id is out of range [ 314.231476][T22718] netlink: 1 bytes leftover after parsing attributes in process `syz.1.8110'. [ 314.244671][T22713] netlink: zone id is out of range [ 314.249839][T22713] netlink: zone id is out of range [ 314.260620][T22718] xt_policy: neither incoming nor outgoing policy selected [ 314.268740][T22713] netlink: zone id is out of range [ 314.296846][T22713] netlink: zone id is out of range [ 314.317641][T22713] netlink: zone id is out of range [ 314.335301][T22713] netlink: zone id is out of range [ 314.356569][T22713] netlink: zone id is out of range [ 314.724044][T22740] xt_l2tp: unknown flags: 10 [ 314.783986][T22745] tipc: Enabling of bearer rejected, media not registered [ 315.164391][T22777] netlink: 277 bytes leftover after parsing attributes in process `syz.4.8138'. [ 315.471903][T22805] netlink: 'syz.2.8151': attribute type 1 has an invalid length. [ 315.494540][T22805] nbd: error processing sock list [ 316.237687][T22866] netlink: 'syz.4.8183': attribute type 4 has an invalid length. [ 316.254686][T22866] netlink: 17 bytes leftover after parsing attributes in process `syz.4.8183'. [ 316.589863][T22896] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 317.033314][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.053396][T22930] bond4: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 317.070200][T22936] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8212'. [ 317.079636][T22936] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8212'. [ 317.090207][T22930] bond4 (unregistering): Released all slaves [ 317.108276][ T5147] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 317.258937][T22947] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8218'. [ 317.383910][T22947] bond2: Invalid ad_actor_system MAC address. [ 317.413698][T22947] bond2: option ad_actor_system: invalid value (1) [ 317.457078][T22947] bond2 (unregistering): Released all slaves [ 317.694180][T22978] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8234'. [ 318.484604][T23035] netlink: 640 bytes leftover after parsing attributes in process `syz.2.8261'. [ 318.845189][T23060] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8271'. [ 318.993133][T23067] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8275'. [ 319.709176][T23130] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8300'. [ 319.730193][T23130] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8300'. [ 320.451034][T23181] netlink: 'syz.3.8322': attribute type 4 has an invalid length. [ 321.369716][T23259] __nla_validate_parse: 1 callbacks suppressed [ 321.369735][T23259] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8359'. [ 321.504594][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 321.789650][T23294] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8376'. [ 322.017447][T23305] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8381'. [ 322.405744][T23331] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8397'. [ 322.430394][T23331] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8397'. [ 322.635726][T23351] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8403'. [ 323.233897][T23399] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8426'. [ 323.356342][T23409] net_ratelimit: 46 callbacks suppressed [ 323.356355][T23409] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 323.386800][T23411] netlink: 13 bytes leftover after parsing attributes in process `syz.3.8432'. [ 323.439759][T23413] xt_limit: Overflow, try lower: 271964/0 [ 323.565047][T23423] xt_cgroup: invalid path, errno=-2 [ 323.859165][T23447] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8450'. [ 324.260448][ T1792] IPVS: starting estimator thread 0... [ 324.359027][T23491] tipc: Enabling not permitted [ 324.368888][T23491] tipc: Enabling of bearer rejected, failed to enable media [ 324.375375][T23483] IPVS: using max 33 ests per chain, 79200 per kthread [ 324.705633][ T251] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 324.746622][T23521] tipc: Enabled bearer , priority 11 [ 325.386208][T23572] netlink: 'syz.1.8508': attribute type 18 has an invalid length. [ 325.423861][ T1113] netdevsim netdevsim1 : set [0, 0] type 1 family 0 port 8472 - 0 [ 325.458219][ T1113] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 325.470358][ T1113] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 325.479469][ T1113] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 325.525566][T23579] xt_hashlimit: size too large, truncated to 1048576 [ 325.600855][T23587] netlink: 'syz.4.8514': attribute type 32 has an invalid length. [ 325.618929][T23587] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8514'. [ 325.681119][T23587] bond4: Setting coupled_control to off (0) [ 326.098322][ T1792] IPVS: starting estimator thread 0... [ 326.214531][T23628] IPVS: using max 33 ests per chain, 79200 per kthread [ 326.258063][T23640] netlink: 'syz.4.8538': attribute type 1 has an invalid length. [ 326.271080][T23640] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 326.934958][T23690] __nla_validate_parse: 1 callbacks suppressed [ 326.934976][T23690] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8562'. [ 327.053211][T23699] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8567'. [ 327.672698][T23742] netlink: 52 bytes leftover after parsing attributes in process `syz.0.8587'. [ 327.681210][T23747] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8589'. [ 327.724489][T23742] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8587'. [ 327.733950][T23742] netlink: 52 bytes leftover after parsing attributes in process `syz.0.8587'. [ 327.763367][T23742] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8587'. [ 327.794705][T23742] netlink: 52 bytes leftover after parsing attributes in process `syz.0.8587'. [ 328.168636][T23775] netlink: 'syz.2.8603': attribute type 10 has an invalid length. [ 328.193419][T23775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 328.211033][T23775] batadv0: entered promiscuous mode [ 328.223511][T23775] batadv0: entered allmulticast mode [ 328.241913][T23782] netlink: 'syz.2.8603': attribute type 10 has an invalid length. [ 328.267666][T23775] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 328.278749][T23782] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8603'. [ 328.290766][T23782] bond0: (slave batadv0): Releasing backup interface [ 328.320774][T23782] bridge0: port 3(batadv0) entered blocking state [ 328.330218][T23782] bridge0: port 3(batadv0) entered disabled state [ 328.526013][T23801] tipc: Started in network mode [ 328.544957][T23801] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 328.552157][T23801] tipc: Enabled bearer , priority 10 [ 328.744800][ T251] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 328.754286][ T251] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 328.910415][T23832] netlink: 104 bytes leftover after parsing attributes in process `syz.2.8628'. [ 328.944607][ T6095] Bluetooth: hci4: command 0x0406 tx timeout [ 329.053371][T23843] netlink: 'syz.0.8631': attribute type 1 has an invalid length. [ 329.658638][T23896] netlink: 'syz.0.8661': attribute type 3 has an invalid length. [ 329.692123][ T1792] tipc: Node number set to 10136234 [ 330.856119][ T1113] tipc: Subscription rejected, illegal request [ 331.074956][T23986] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 331.087558][T23988] netlink: 'syz.0.8704': attribute type 3 has an invalid length. [ 331.201662][T23994] xt_HMARK: spi-set and port-set can't be combined [ 332.048665][T24065] __nla_validate_parse: 7 callbacks suppressed [ 332.048685][T24065] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8742'. [ 332.113859][T24069] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8744'. [ 332.174997][T24073] netlink: 'syz.0.8747': attribute type 62 has an invalid length. [ 332.370494][T24090] netlink: 'syz.0.8754': attribute type 1 has an invalid length. [ 332.578722][T24106] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8761'. [ 332.601991][T24106] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8761'. [ 332.791143][T24125] xt_l2tp: v2 sid > 0xffff: 1114112 [ 333.055546][T24139] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8778'. [ 333.066907][T24141] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8779'. [ 333.078024][T24141] F: renamed from gre0 [ 333.106306][T24141] F: entered allmulticast mode [ 333.144065][T24141] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8779'. [ 333.255517][T24153] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8784'. [ 333.276005][T24153] netlink: 'syz.2.8784': attribute type 5 has an invalid length. [ 333.286103][T24153] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8784'. [ 333.427076][T24162] netlink: 80 bytes leftover after parsing attributes in process `syz.2.8789'. [ 333.848609][T24193] lo: entered allmulticast mode [ 333.861710][T24193] lo: left allmulticast mode [ 335.032511][T24270] veth3: entered allmulticast mode [ 336.368561][T24357] xt_limit: Overflow, try lower: 604147548/4200216962 [ 336.382498][T24362] netlink: 'syz.1.8886': attribute type 3 has an invalid length. [ 336.530667][T24375] netlink: 'syz.0.8891': attribute type 2 has an invalid length. [ 336.621622][T24381] atomic_op ffff88802a42c998 conn xmit_atomic 0000000000000000 [ 336.778717][T24394] netlink: 'syz.1.8900': attribute type 1 has an invalid length. [ 337.034242][T24412] tipc: MTU too low for tipc bearer [ 337.505816][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 337.663837][T24459] netlink: 'syz.4.8928': attribute type 32 has an invalid length. [ 337.708959][T24459] __nla_validate_parse: 10 callbacks suppressed [ 337.708977][T24459] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8928'. [ 337.761125][T24459] bond5: option coupled_control: invalid value (192) [ 337.770687][T24459] bond5 (unregistering): Released all slaves [ 337.780531][T24466] netlink: 'syz.2.8933': attribute type 1 has an invalid length. [ 338.069619][T24490] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8943'. [ 338.088321][T24490] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8943'. [ 338.099885][T24490] netlink: 2 bytes leftover after parsing attributes in process `syz.0.8943'. [ 338.109523][T24490] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8943'. [ 338.119251][T24490] netlink: 2 bytes leftover after parsing attributes in process `syz.0.8943'. [ 338.340632][T24509] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8953'. [ 338.361840][T24509] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8953'. [ 338.470333][T24515] IPVS: persistence engine module ip_vs_pe_ not found [ 338.613080][T24530] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8964'. [ 338.838280][T24546] tap0: tun_chr_ioctl cmd 2148553947 [ 339.622068][T24607] netlink: 220 bytes leftover after parsing attributes in process `syz.1.9000'. [ 340.020040][T24635] netlink: 'syz.0.9012': attribute type 83 has an invalid length. [ 340.237635][T24649] IPv6: NLM_F_CREATE should be specified when creating new route [ 340.842308][T24695] TCP: TCP_TX_DELAY enabled [ 341.374990][T24735] netlink: 'syz.0.9058': attribute type 25 has an invalid length. [ 341.395615][T24735] netlink: 'syz.0.9058': attribute type 28 has an invalid length. [ 342.303738][T24796] bond5: entered promiscuous mode [ 342.524816][T24813] bridge0: port 4(syz_tun) entered blocking state [ 342.535109][T24813] bridge0: port 4(syz_tun) entered disabled state [ 342.548031][T24813] syz_tun: entered allmulticast mode [ 342.556145][T24813] syz_tun: entered promiscuous mode [ 343.366729][T24881] __nla_validate_parse: 4 callbacks suppressed [ 343.366747][T24881] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.9126'. [ 344.132435][T24938] netlink: 36 bytes leftover after parsing attributes in process `syz.3.9153'. [ 344.476930][T24955] netlink: 'syz.0.9160': attribute type 5 has an invalid length. [ 344.507252][T24963] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9164'. [ 344.639901][T24971] veth0_to_bridge: entered promiscuous mode [ 344.673368][T24970] veth0_to_bridge: left promiscuous mode [ 345.034342][T24983] netlink: set zone limit has 4 unknown bytes [ 345.135024][T24985] netlink: zone id is out of range [ 345.140357][T24985] netlink: zone id is out of range [ 346.154124][T25045] gtp0: entered promiscuous mode [ 346.175466][T25045] gtp0: entered allmulticast mode [ 346.304341][T25063] sch_fq: defrate 0 ignored. [ 346.571216][T25081] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9222'. [ 346.582371][T25081] netlink: 176 bytes leftover after parsing attributes in process `syz.0.9222'. [ 346.591842][T25081] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9222'. [ 346.682443][T25094] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9228'. [ 347.016299][T25116] netlink: 'syz.4.9239': attribute type 83 has an invalid length. [ 347.068801][T25120] netlink: 248 bytes leftover after parsing attributes in process `syz.2.9241'. [ 347.241872][T25132] netlink: 36 bytes leftover after parsing attributes in process `syz.2.9246'. [ 347.703197][T25160] netlink: 11562 bytes leftover after parsing attributes in process `syz.1.9257'. [ 347.717493][T25159] block nbd1: Unsupported socket: should be TCP or UNIX. [ 347.885130][T25173] xt_hashlimit: size too large, truncated to 1048576 [ 347.936277][T25179] : renamed from vxcan1 (while UP) [ 347.961643][T25180] block nbd1: Unsupported socket: should be TCP or UNIX. [ 348.327120][T25205] netlink: 'syz.1.9275': attribute type 1 has an invalid length. [ 348.343563][T25205] netlink: 'syz.1.9275': attribute type 1 has an invalid length. [ 348.355707][T25205] netlink: 'syz.1.9275': attribute type 8 has an invalid length. [ 348.772678][T25231] __nla_validate_parse: 7 callbacks suppressed [ 348.772698][T25231] netlink: 64 bytes leftover after parsing attributes in process `syz.1.9284'. [ 348.940724][T25243] netlink: 'syz.4.9292': attribute type 1 has an invalid length. [ 348.951251][T25243] netlink: 'syz.4.9292': attribute type 2 has an invalid length. [ 348.971330][T25243] netlink: 'syz.4.9292': attribute type 1 has an invalid length. [ 348.995004][T25243] netlink: 'syz.4.9292': attribute type 3 has an invalid length. [ 349.011407][T25243] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9292'. [ 349.157818][T25259] netlink: 'syz.1.9298': attribute type 3 has an invalid length. [ 349.166467][T25259] netlink: 'syz.1.9298': attribute type 3 has an invalid length. [ 349.188248][T25259] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9298'. [ 349.298291][T25268] netlink: 36 bytes leftover after parsing attributes in process `syz.2.9304'. [ 349.563893][T25290] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9313'. [ 349.591078][T25290] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9313'. [ 349.611318][T25295] IPVS: dh: TCP 172.20.20.170:0 - no destination available [ 349.912296][T25317] : renamed from bond0 (while UP) [ 350.194922][T25339] netlink: 16215 bytes leftover after parsing attributes in process `syz.0.9339'. [ 350.695007][T25378] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9358'. [ 350.742652][T25378] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9358'. [ 350.930268][T25396] veth0: entered promiscuous mode [ 350.938480][T25396] veth0: left promiscuous mode [ 351.289682][T25414] netlink: 232 bytes leftover after parsing attributes in process `syz.0.9374'. [ 352.914286][T25535] validate_nla: 1 callbacks suppressed [ 352.914305][T25535] netlink: 'syz.3.9431': attribute type 3 has an invalid length. [ 353.072220][T25550] veth0_to_team: entered allmulticast mode [ 353.594025][T25580] 8021q: adding VLAN 0 to HW filter on device bond4 [ 353.623162][T25580] bridge0: port 4(bond4) entered blocking state [ 353.642277][T25580] bridge0: port 4(bond4) entered disabled state [ 353.668122][T25580] bond4: entered allmulticast mode [ 353.694185][T25580] bond4: entered promiscuous mode [ 353.869035][T25602] __nla_validate_parse: 3 callbacks suppressed [ 353.869052][T25602] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9463'. [ 353.985274][T25607] netlink: 190972 bytes leftover after parsing attributes in process `syz.3.9465'. [ 354.156088][T25625] netlink: 88 bytes leftover after parsing attributes in process `syz.3.9474'. [ 354.249784][T25633] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9477'. [ 354.292019][T25636] netlink: 'syz.4.9479': attribute type 4 has an invalid length. [ 354.306277][T25636] netlink: 17 bytes leftover after parsing attributes in process `syz.4.9479'. [ 354.328971][T25636] netlink: 14601 bytes leftover after parsing attributes in process `syz.4.9479'. [ 354.536310][T25653] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9487'. [ 354.681832][ T5147] block nbd1: Receive control failed (result -32) [ 354.765428][T25668] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9495'. [ 354.794387][T25671] netlink: 52 bytes leftover after parsing attributes in process `syz.1.9496'. [ 354.803932][T25671] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.812595][T25671] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.937675][T25679] netlink: 284 bytes leftover after parsing attributes in process `syz.4.9498'. [ 356.065360][ T251] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 356.301698][T25770] netem: incorrect gi model size [ 356.314177][T25770] netem: change failed [ 356.845797][T25809] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 357.155657][T25822] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 358.199146][T25879] netlink: 'syz.0.9590': attribute type 25 has an invalid length. [ 358.755855][T25905] ip6erspan0: entered allmulticast mode [ 359.193486][T25940] __nla_validate_parse: 9 callbacks suppressed [ 359.193507][T25940] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9619'. [ 359.220416][T25942] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.9620'. [ 359.627860][T25965] netlink: 64 bytes leftover after parsing attributes in process `syz.4.9632'. [ 360.436056][T26006] nbd2: detected capacity change from 0 to 63 [ 360.448124][ T5147] block nbd2: Receive control failed (result -32) [ 360.455532][ T6095] block nbd2: Receive control failed (result -32) [ 360.476467][T26017] block nbd2: Dead connection, failed to find a fallback [ 360.494477][T26017] block nbd2: shutting down sockets [ 360.502134][T26017] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 360.520393][T26019] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9657'. [ 360.530261][T26017] Buffer I/O error on dev nbd2, logical block 0, async page read [ 360.530588][T26017] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 360.530614][T26017] Buffer I/O error on dev nbd2, logical block 1, async page read [ 360.530653][T26017] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 360.530674][T26017] Buffer I/O error on dev nbd2, logical block 2, async page read [ 360.623022][T26017] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 360.642904][T26017] Buffer I/O error on dev nbd2, logical block 3, async page read [ 360.653372][T26017] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 360.663902][T26017] Buffer I/O error on dev nbd2, logical block 0, async page read [ 360.692736][T26017] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 360.702620][T26017] Buffer I/O error on dev nbd2, logical block 1, async page read [ 360.713867][T26017] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 360.727086][T26017] Buffer I/O error on dev nbd2, logical block 2, async page read [ 360.736166][T26017] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 360.746851][T26029] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9662'. [ 360.749522][T26017] Buffer I/O error on dev nbd2, logical block 3, async page read [ 360.764171][T26017] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 360.781171][T26032] netlink: 'syz.4.9664': attribute type 6 has an invalid length. [ 360.799956][T26017] Buffer I/O error on dev nbd2, logical block 0, async page read [ 360.809188][T26017] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 360.820204][T26017] Buffer I/O error on dev nbd2, logical block 1, async page read [ 360.829468][T26017] ldm_validate_partition_table(): Disk read failed. [ 360.840631][T26017] Dev nbd2: unable to read RDB block 0 [ 360.847381][T26017] nbd2: unable to read partition table [ 360.873803][T26017] ldm_validate_partition_table(): Disk read failed. [ 360.881875][T26017] Dev nbd2: unable to read RDB block 0 [ 360.891442][T26017] nbd2: unable to read partition table [ 361.199479][T26058] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9676'. [ 361.239466][T26062] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9678'. [ 361.428753][T26076] netlink: 284 bytes leftover after parsing attributes in process `syz.0.9685'. [ 362.092073][T26127] tipc: Started in network mode [ 362.104544][T26127] tipc: Node identity ac14140f, cluster identity 4711 [ 362.133163][T26127] tipc: New replicast peer: 255.255.255.255 [ 362.146242][T26127] tipc: Enabled bearer , priority 10 [ 362.263458][T26141] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9714'. [ 362.376468][T26151] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9719'. [ 362.614325][T26167] netlink: 'syz.1.9725': attribute type 4 has an invalid length. [ 363.332272][T26214] netlink: 'syz.4.9748': attribute type 9 has an invalid length. [ 363.380750][ T5961] tipc: Node number set to 2886997007 [ 363.550455][T26227] blkio.reset_stats is deprecated [ 363.726677][T26242] sctp: [Deprecated]: syz.1.9761 (pid 26242) Use of struct sctp_assoc_value in delayed_ack socket option. [ 363.726677][T26242] Use struct sctp_sack_info instead [ 363.775705][T26246] hsr0: entered promiscuous mode [ 363.788254][T26246] macvlan2: entered allmulticast mode [ 363.801819][T26246] hsr0: entered allmulticast mode [ 363.815145][T26246] hsr_slave_0: entered allmulticast mode [ 363.827641][T26246] hsr_slave_1: entered allmulticast mode [ 363.956270][T26258] sctp: [Deprecated]: syz.1.9767 (pid 26258) Use of int in maxseg socket option. [ 363.956270][T26258] Use struct sctp_assoc_value instead [ 364.300890][T26280] A link change request failed with some changes committed already. Interface .` may have been left with an inconsistent configuration, please check. [ 364.480990][T26286] veth0: entered promiscuous mode [ 364.502256][T26286] veth0: left promiscuous mode [ 365.416421][T26337] IPv6: NLM_F_CREATE should be specified when creating new route [ 366.357292][T26410] netlink: 'syz.0.9841': attribute type 14 has an invalid length. [ 366.489355][T26418] __nla_validate_parse: 5 callbacks suppressed [ 366.489373][T26418] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9845'. [ 366.645879][T26425] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9848'. [ 366.768443][T26431] nbd3: detected capacity change from 0 to 127 [ 366.779135][T26017] block nbd3: Send control failed (result -32) [ 366.786869][ T6095] block nbd3: Receive control failed (result -32) [ 366.795707][T26017] block nbd3: Request send failed, requeueing [ 366.830630][ T5211] block nbd3: Dead connection, failed to find a fallback [ 366.838603][ T5211] block nbd3: shutting down sockets [ 366.844252][ T5211] blk_print_req_error: 138 callbacks suppressed [ 366.844267][ T5211] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 366.861896][ T5211] buffer_io_error: 138 callbacks suppressed [ 366.861912][ T5211] Buffer I/O error on dev nbd3, logical block 0, async page read [ 366.876585][T26017] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 366.886442][T26017] Buffer I/O error on dev nbd3, logical block 1, async page read [ 366.894253][T26017] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 366.900966][T26437] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9855'. [ 366.904964][T26017] Buffer I/O error on dev nbd3, logical block 2, async page read [ 366.921747][T26017] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 366.934620][T26017] Buffer I/O error on dev nbd3, logical block 3, async page read [ 366.942464][T26017] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 366.954359][T26017] Buffer I/O error on dev nbd3, logical block 0, async page read [ 366.962240][T26017] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 366.969126][T26437] syz_tun: Device is already in use. [ 366.972030][T26017] Buffer I/O error on dev nbd3, logical block 1, async page read [ 366.985398][T26017] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 366.994986][T26017] Buffer I/O error on dev nbd3, logical block 2, async page read [ 367.003154][T26017] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 367.012994][T26017] Buffer I/O error on dev nbd3, logical block 3, async page read [ 367.020908][T26017] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 367.031933][T26017] Buffer I/O error on dev nbd3, logical block 0, async page read [ 367.041569][T26017] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 367.053011][T26017] Buffer I/O error on dev nbd3, logical block 1, async page read [ 367.063129][T26017] ldm_validate_partition_table(): Disk read failed. [ 367.088505][T26017] Dev nbd3: unable to read RDB block 0 [ 367.096059][T26017] nbd3: unable to read partition table [ 367.130252][T26017] ldm_validate_partition_table(): Disk read failed. [ 367.143255][T26017] Dev nbd3: unable to read RDB block 0 [ 367.151710][T26017] nbd3: unable to read partition table [ 367.360973][T26458] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9864'. [ 367.488517][T26470] netlink: 104 bytes leftover after parsing attributes in process `syz.1.9869'. [ 367.707034][T26486] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9875'. [ 367.843453][T26496] netlink: 'syz.0.9881': attribute type 2 has an invalid length. [ 367.866507][T26496] netlink: 100 bytes leftover after parsing attributes in process `syz.0.9881'. [ 368.153253][T26519] netlink: 104 bytes leftover after parsing attributes in process `syz.2.9890'. [ 369.144510][T26593] netlink: 'syz.3.9925': attribute type 10 has an invalid length. [ 369.530532][T26619] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.9936'. [ 369.680490][T26630] IPv6: Can't replace route, no match found [ 369.705120][T26630] IPv6: Can't replace route, no match found [ 369.819834][T26640] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9946'. [ 370.179578][T26666] netlink: 'syz.2.9959': attribute type 10 has an invalid length. [ 370.188459][T26666] veth0_vlan: left promiscuous mode [ 370.195420][T26666] veth0_vlan: entered promiscuous mode [ 370.202373][T26666] team0: Device veth0_vlan failed to register rx_handler [ 370.213790][T26666] tipc: Resetting bearer [ 370.794591][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 371.618691][T26755] __nla_validate_parse: 7 callbacks suppressed [ 371.618711][T26755] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10000'. [ 371.747345][ T73] wlan1: Trigger new scan to find an IBSS to join [ 372.440051][T26815] netlink: 232 bytes leftover after parsing attributes in process `syz.3.10029'. [ 372.558481][T26825] netlink: 'syz.0.10032': attribute type 3 has an invalid length. [ 372.569884][T26827] netlink: 190972 bytes leftover after parsing attributes in process `syz.2.10034'. [ 372.576176][T26825] netlink: 'syz.0.10032': attribute type 1 has an invalid length. [ 372.595966][T26825] netlink: 212 bytes leftover after parsing attributes in process `syz.0.10032'. [ 372.617086][T26825] NCSI netlink: No device for ifindex 813332851 [ 372.659206][T26829] tap0: tun_chr_ioctl cmd 1074025676 [ 372.677338][T26829] tap0: owner set to 0 [ 372.776441][T26837] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10039'. [ 372.835687][T26843] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10040'. [ 372.857702][T26843] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10040'. [ 373.198209][T26865] netlink: 'syz.2.10053': attribute type 83 has an invalid length. [ 373.461524][T26888] sctp: [Deprecated]: syz.3.10063 (pid 26888) Use of struct sctp_assoc_value in delayed_ack socket option. [ 373.461524][T26888] Use struct sctp_sack_info instead [ 373.519605][ T30] audit: type=1804 audit(1776254157.432:5): pid=26892 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.10065" name="/newroot/2015/cgroup.controllers" dev="tmpfs" ino=10124 res=1 errno=0 [ 373.556349][ T30] audit: type=1800 audit(1776254157.472:6): pid=26892 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.10065" name="cgroup.controllers" dev="tmpfs" ino=10124 res=0 errno=0 [ 373.751625][T26908] netlink: 'syz.3.10073': attribute type 8 has an invalid length. [ 373.816946][T26912] netlink: 104 bytes leftover after parsing attributes in process `syz.3.10074'. [ 374.044773][T26920] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10078'. [ 374.628579][T26951] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10089'. [ 374.706955][ T13] wlan1: Trigger new scan to find an IBSS to join [ 375.204871][T26994] veth0: entered promiscuous mode [ 375.211249][T26993] veth0: left promiscuous mode [ 375.418049][T27012] netem: invalid attributes len -24 [ 375.434761][T27012] netem: change failed [ 375.537002][ T6095] block nbd4: Receive control failed (result -32) [ 375.643729][ T2996] wlan1: Creating new IBSS network, BSSID 82:13:f1:5a:f0:35 [ 376.032406][T27052] netlink: 'syz.2.10137': attribute type 1 has an invalid length. [ 376.064892][T27052] netlink: 'syz.2.10137': attribute type 7 has an invalid length. [ 376.081173][T27052] netlink: 'syz.2.10137': attribute type 8 has an invalid length. [ 376.099939][T27052] NCSI netlink: No device for ifindex 65584 [ 376.250831][T27058] bond4 (unregistering): Released all slaves [ 376.698906][T27096] netlink: 'syz.0.10157': attribute type 2 has an invalid length. [ 377.628279][T27168] netlink: 'syz.4.10194': attribute type 4 has an invalid length. [ 377.666711][T27170] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 377.682445][T27170] syzkaller1: linktype set to 823 [ 378.332511][T27224] __nla_validate_parse: 6 callbacks suppressed [ 378.332529][T27224] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10218'. [ 378.434908][T27224] macvtap1: entered promiscuous mode [ 378.440341][T27224] vlan0: entered promiscuous mode [ 378.445944][T27224] bond0: entered promiscuous mode [ 378.456852][T27224] macvtap1: entered allmulticast mode [ 378.622079][T27236] tipc: Enabling of bearer rejected, already enabled [ 379.212834][T27283] netem: change failed [ 379.272581][T27286] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10246'. [ 379.845552][T27326] sch_tbf: burst 0 is lower than device lo mtu (21) ! [ 380.107349][T27340] tap0: tun_chr_ioctl cmd 1074025678 [ 380.114776][T27340] tap0: group set to 0 [ 380.902354][T27395] netlink: 40 bytes leftover after parsing attributes in process `syz.3.10297'. [ 381.562411][T27434] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10313'. [ 381.573638][T27434] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10313'. [ 382.027507][T27466] netlink: 'syz.1.10330': attribute type 33 has an invalid length. [ 382.079186][T27466] bond3: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 382.091677][T27466] bond3 (unregistering): Released all slaves [ 382.156988][T27475] netlink: 'syz.4.10333': attribute type 28 has an invalid length. [ 382.194735][T27475] netlink: 'syz.4.10333': attribute type 3 has an invalid length. [ 382.209813][T27477] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10334'. [ 382.223397][T27475] netlink: 132 bytes leftover after parsing attributes in process `syz.4.10333'. [ 382.231479][T27479] skbuff: bad partial csum: csum=65535/0 headroom=64 headlen=65537 [ 382.250047][T27482] macvtap2: entered allmulticast mode [ 382.258482][T27482] veth0_macvtap: entered allmulticast mode [ 382.483435][T27499] gretap0: left allmulticast mode [ 382.501350][T27499] gretap0: left promiscuous mode [ 382.527404][T27499] bridge0: port 3(gretap0) entered disabled state [ 382.560940][T27499] x9: left allmulticast mode [ 382.568833][T27499] x9: left promiscuous mode [ 382.573748][T27499] bridge0: port 1(0x9) entered disabled state [ 382.588574][T27499] bridge_slave_1: left allmulticast mode [ 382.594245][T27499] bridge_slave_1: left promiscuous mode [ 382.605019][T27499] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.637104][T27499] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 382.658871][T27499] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 382.686368][T27499] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 382.700091][T27499] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 382.712291][T27499] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 382.745931][ T24] wg1 speed is unknown, defaulting to 1000 [ 383.069303][T27524] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10353'. [ 383.436683][T27544] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10363'. [ 383.471785][T27544] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10363'. [ 383.730738][T27562] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10372'. [ 383.767261][T27562] xfrm1: entered promiscuous mode [ 383.772340][T27562] xfrm1: entered allmulticast mode [ 383.825035][T27564] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10374'. [ 383.871045][T27562] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10372'. [ 384.072486][T27578] netlink: 'syz.3.10379': attribute type 83 has an invalid length. [ 384.506942][T27604] netlink: 'syz.1.10388': attribute type 1 has an invalid length. [ 384.537052][T27604] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10388'. [ 384.591823][T27610] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10390'. [ 385.870308][T27704] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10434'. [ 386.093827][T27719] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10441'. [ 386.298479][T27730] netlink: 'syz.0.10446': attribute type 1 has an invalid length. [ 387.152057][T27780] netlink: 'syz.1.10472': attribute type 1 has an invalid length. [ 387.168708][T27780] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10472'. [ 387.365330][T27789] sctp: [Deprecated]: syz.1.10474 (pid 27789) Use of int in max_burst socket option deprecated. [ 387.365330][T27789] Use struct sctp_assoc_value instead [ 387.720158][ T6099] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 387.801536][ T6099] CPU: 0 UID: 0 PID: 6099 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 387.801573][ T6099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 387.801591][ T6099] Call Trace: [ 387.801599][ T6099] [ 387.801607][ T6099] dump_stack_lvl+0xe8/0x150 [ 387.801639][ T6099] dump_header+0xd3/0x4c0 [ 387.801665][ T6099] oom_kill_process+0x3ab/0x970 [ 387.801690][ T6099] out_of_memory+0x106c/0x1410 [ 387.801709][ T6099] ? percpu_ref_put+0x19/0x180 [ 387.801733][ T6099] ? __pfx___mutex_lock+0x10/0x10 [ 387.801766][ T6099] ? __pfx_out_of_memory+0x10/0x10 [ 387.801783][ T6099] ? do_raw_spin_unlock+0xf5/0x210 [ 387.801814][ T6099] try_charge_memcg+0xc53/0x1560 [ 387.801854][ T6099] ? __pfx_try_charge_memcg+0x10/0x10 [ 387.801888][ T6099] ? mem_cgroup_swapin_charge_folio+0x36/0x4d0 [ 387.801915][ T6099] ? mem_cgroup_swapin_charge_folio+0x36/0x4d0 [ 387.801941][ T6099] mem_cgroup_swapin_charge_folio+0x2e3/0x4d0 [ 387.801967][ T6099] __swap_cache_prepare_and_add+0xe8/0x760 [ 387.802000][ T6099] ? page_rmappable_folio+0x9a/0x170 [ 387.802031][ T6099] swap_cache_alloc_folio+0xf1/0x240 [ 387.802062][ T6099] swap_cluster_readahead+0x369/0x690 [ 387.802087][ T6099] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 387.802119][ T6099] ? get_vma_policy+0x27b/0x3c0 [ 387.802144][ T6099] swapin_readahead+0x196/0xc50 [ 387.802176][ T6099] ? __pfx_swapin_readahead+0x10/0x10 [ 387.802195][ T6099] ? swap_table_get+0x1e/0x260 [ 387.802218][ T6099] ? swap_table_get+0x1e/0x260 [ 387.802240][ T6099] ? swap_table_get+0x1e/0x260 [ 387.802264][ T6099] ? swap_table_get+0x216/0x260 [ 387.802290][ T6099] ? swap_cache_get_folio+0x513/0x520 [ 387.802328][ T6099] do_swap_page+0x56f/0x5a20 [ 387.802376][ T6099] ? do_swap_page+0x127/0x5a20 [ 387.802400][ T6099] ? __pfx_do_swap_page+0x10/0x10 [ 387.802422][ T6099] ? __pte_offset_map+0x1ae/0x240 [ 387.802443][ T6099] ? pte_offset_map_rw_nolock+0xea/0x160 [ 387.802465][ T6099] handle_mm_fault+0x12d2/0x3310 [ 387.802506][ T6099] ? handle_mm_fault+0xee/0x3310 [ 387.802544][ T6099] ? __pfx_handle_mm_fault+0x10/0x10 [ 387.802567][ T6099] ? lock_vma_under_rcu+0x45a/0x500 [ 387.802614][ T6099] do_user_addr_fault+0xa73/0x1340 [ 387.802644][ T6099] ? rcu_is_watching+0x15/0xb0 [ 387.802668][ T6099] ? trace_page_fault_user+0x84/0x210 [ 387.802692][ T6099] exc_page_fault+0x6a/0xc0 [ 387.802716][ T6099] asm_exc_page_fault+0x26/0x30 [ 387.802737][ T6099] RIP: 0033:0x7fbcf9b5d04e [ 387.802758][ T6099] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 387.802772][ T6099] RSP: 002b:00007ffc21267588 EFLAGS: 00010246 [ 387.802793][ T6099] RAX: 0000000000000000 RBX: 000055555bfc8500 RCX: 00007fbcf9b5d04e [ 387.802805][ T6099] RDX: 00007ffc212675e0 RSI: 0000000000000000 RDI: 0000000000000000 [ 387.802816][ T6099] RBP: 00007ffc2126764c R08: 0000000000000000 R09: 0000000000000000 [ 387.802825][ T6099] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000001388 [ 387.802835][ T6099] R13: 00000000000927c0 R14: 000000000005e7f6 R15: 00007ffc212676a0 [ 387.802865][ T6099] [ 388.177524][ T6099] memory: usage 299140kB, limit 307200kB, failcnt 435 [ 388.184322][ T6099] memory+swap: usage 296992kB, limit 9007199254740988kB, failcnt 0 [ 388.192635][ T6099] kmem: usage 294020kB, limit 9007199254740988kB, failcnt 0 [ 388.200280][ T6099] Memory cgroup stats for /syz4: [ 388.200617][ T6099] cache 0 [ 388.208520][ T6099] rss 0 [ 388.211277][ T6099] rss_huge 0 [ 388.215541][ T6099] shmem 0 [ 388.218497][ T6099] mapped_file 0 [ 388.221955][ T6099] dirty 0 [ 388.225311][ T6099] writeback 0 [ 388.228595][ T6099] workingset_refault_anon 1 [ 388.233090][ T6099] workingset_refault_file 0 [ 388.238557][ T6099] swap 196608 [ 388.241849][ T6099] swapcached 204800 [ 388.245696][ T6099] pgpgin 89556 [ 388.249063][ T6099] pgpgout 89555 [ 388.252516][ T6099] pgfault 227483 [ 388.256440][ T6099] pgmajfault 2 [ 388.259811][ T6099] inactive_anon 0 [ 388.263441][ T6099] active_anon 4096 [ 388.267271][ T6099] inactive_file 0 [ 388.270902][ T6099] active_file 0 [ 388.274358][ T6099] unevictable 0 [ 388.369576][ T6099] hierarchical_memory_limit 314572800 [ 388.405206][ T6099] hierarchical_memsw_limit 9223372036854771712 [ 388.411393][ T6099] total_cache 0 [ 388.513566][ T6099] total_rss 0 [ 388.527242][ T6099] total_rss_huge 0 [ 388.531004][ T6099] total_shmem 0 [ 388.611196][ T6099] total_mapped_file 0 [ 388.631057][ T6099] total_dirty 0 [ 388.650201][ T6099] total_writeback 0 [ 388.698144][ T6099] total_workingset_refault_anon 1 [ 388.703201][ T6099] total_workingset_refault_file 0 [ 388.801514][ T6099] total_swap 196608 [ 388.817053][ T6099] total_swapcached 204800 [ 388.821410][ T6099] total_pgpgin 89556 [ 388.867011][T27837] ip6gre0: Master is either lo or non-ether device [ 388.904766][ T6099] total_pgpgout 89555 [ 388.908782][ T6099] total_pgfault 227483 [ 388.912940][ T6099] total_pgmajfault 2 [ 388.994508][ T6099] total_inactive_anon 0 [ 389.037050][ T6099] total_active_anon 4096 [ 389.041328][ T6099] total_inactive_file 0 [ 389.101809][ T6099] total_active_file 0 [ 389.116596][ T6099] total_unevictable 0 [ 389.120603][ T6099] anon_cost 0 [ 389.179962][ T6099] file_cost 0 [ 389.183288][ T6099] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.10443,pid=27720,uid=0 [ 389.227256][ T6099] Memory cgroup out of memory: Killed process 27720 (syz.4.10443) total-vm:104336kB, anon-rss:1240kB, file-rss:22344kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 389.383771][T27860] __nla_validate_parse: 1 callbacks suppressed [ 389.383789][T27860] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10507'. [ 389.392158][T27862] netlink: 196 bytes leftover after parsing attributes in process `syz.0.10509'. [ 389.434651][T27861] netlink: 'syz.2.10508': attribute type 1 has an invalid length. [ 389.499367][T27861] netlink: 184 bytes leftover after parsing attributes in process `syz.2.10508'. [ 389.574892][T27861] netlink: 'syz.2.10508': attribute type 1 has an invalid length. [ 389.608004][T27861] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10508'. [ 389.771335][T27870] netlink: 'syz.1.10511': attribute type 2 has an invalid length. [ 389.812668][T27872] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10514'. [ 390.054644][T27885] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.10521'. [ 390.095200][T27885] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.10521'. [ 390.579978][T27921] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10536'. [ 390.631894][T27921] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10536'. [ 390.733257][T27931] netlink: 104 bytes leftover after parsing attributes in process `syz.0.10542'. [ 391.738757][T27994] syz.2.10570 (27994) used greatest stack depth: 17144 bytes left [ 392.406959][T28055] netem: incorrect ge model size [ 394.795462][T28222] __nla_validate_parse: 5 callbacks suppressed [ 394.795481][T28222] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10677'. [ 394.814239][T28222] netlink: 60 bytes leftover after parsing attributes in process `syz.2.10677'. [ 394.824013][T28222] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10677'. [ 395.026153][T28240] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10684'. [ 395.193941][T28252] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.10691'. [ 395.269250][T28257] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10693'. [ 395.319890][T28260] netdevsim netdevsim2 netdevsim0: IPsec offload requires 128 bit authentication [ 395.505653][T28273] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10701'. [ 395.563497][T28273] netlink: 'syz.4.10701': attribute type 1 has an invalid length. [ 395.596440][T28282] netlink: 212356 bytes leftover after parsing attributes in process `syz.2.10706'. [ 395.609110][T28273] netlink: 'syz.4.10701': attribute type 2 has an invalid length. [ 395.680121][T28286] netlink: 92 bytes leftover after parsing attributes in process `syz.3.10707'. [ 395.830833][T28297] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10713'. [ 395.914355][T28302] xt_hashlimit: size too large, truncated to 1048576 [ 396.566177][T28353] netlink: 'syz.1.10739': attribute type 83 has an invalid length. [ 396.682759][T28364] netlink: 'syz.4.10745': attribute type 4 has an invalid length. [ 397.860061][T28450] hsr_slave_0: left promiscuous mode [ 397.885737][T28450] hsr_slave_1: left promiscuous mode [ 398.436041][T28496] sctp: [Deprecated]: syz.2.10808 (pid 28496) Use of struct sctp_assoc_value in delayed_ack socket option. [ 398.436041][T28496] Use struct sctp_sack_info instead [ 399.702131][T28587] erspan0: entered promiscuous mode [ 399.884343][T28604] __nla_validate_parse: 15 callbacks suppressed [ 399.884362][T28604] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10859'. [ 400.118999][T28622] netlink: 'syz.2.10869': attribute type 4 has an invalid length. [ 400.363652][T28639] netlink: 'syz.1.10877': attribute type 1 has an invalid length. [ 400.390970][T28639] netlink: 'syz.1.10877': attribute type 3 has an invalid length. [ 400.421511][T28639] netlink: 'syz.1.10877': attribute type 7 has an invalid length. [ 400.453038][T28639] netlink: 'syz.1.10877': attribute type 8 has an invalid length. [ 400.478763][T28639] netlink: 184 bytes leftover after parsing attributes in process `syz.1.10877'. [ 400.505858][T28639] NCSI netlink: No device for ifindex 131092 [ 400.645389][T28649] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10880'. [ 402.487765][T28766] netlink: 16215 bytes leftover after parsing attributes in process `syz.4.10931'. [ 402.549338][T28772] netlink: 212324 bytes leftover after parsing attributes in process `syz.1.10934'. [ 402.726680][T28785] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10940'. [ 402.958276][T28803] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.10949'. [ 403.013649][T28808] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 403.244966][T28825] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10959'. [ 403.254220][T28825] bond0: ARP target 8.4.0.0 is already present [ 403.261068][T28825] bond0: option arp_ip_target: invalid value (1032) [ 403.631940][T28842] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10968'. [ 403.771160][T28848] netlink: 256 bytes leftover after parsing attributes in process `syz.3.10971'. [ 404.291529][T28864] ipvlan2: entered allmulticast mode [ 404.322651][T28864] syz_tun: entered allmulticast mode [ 404.401890][T28871] Bluetooth: MGMT ver 1.23 [ 405.411382][T28948] __nla_validate_parse: 5 callbacks suppressed [ 405.411419][T28948] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11017'. [ 405.411774][T28954] netlink: 104 bytes leftover after parsing attributes in process `syz.2.11019'. [ 405.587118][T28959] nbd: couldn't find a device at index 0 [ 405.615874][T28964] netlink: 207952 bytes leftover after parsing attributes in process `syz.0.11023'. [ 405.972086][T28990] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11034'. [ 405.987497][T28990] netlink: 'syz.3.11034': attribute type 7 has an invalid length. [ 406.005692][T28990] netlink: 'syz.3.11034': attribute type 8 has an invalid length. [ 406.013528][T28990] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11034'. [ 406.264829][T29007] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 406.307113][T29013] netlink: 68 bytes leftover after parsing attributes in process `syz.3.11044'. [ 406.352585][T29013] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11044'. [ 406.464966][ T5147] Bluetooth: hci2: command 0x0406 tx timeout [ 406.465511][ T6095] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 406.539386][T29029] syzkaller1: entered promiscuous mode [ 406.560852][T29029] syzkaller1: entered allmulticast mode [ 406.756634][T29047] syzkaller1: entered promiscuous mode [ 406.762801][T29047] syzkaller1: entered allmulticast mode [ 407.150912][T29076] netlink: 43 bytes leftover after parsing attributes in process `syz.4.11073'. [ 407.254318][T29082] syzkaller1: entered promiscuous mode [ 407.261628][T29082] syzkaller1: entered allmulticast mode [ 408.529565][T29167] macvtap1: entered promiscuous mode [ 408.538788][T29167] macvtap1: entered allmulticast mode [ 408.544190][T29167] veth1_vlan: entered allmulticast mode [ 408.577887][T29173] macvtap2: entered promiscuous mode [ 408.587769][T29173] macvtap2: entered allmulticast mode [ 408.652237][T29179] syzkaller1: entered promiscuous mode [ 408.659680][T29179] syzkaller1: entered allmulticast mode [ 408.747068][T29184] netlink: 'syz.1.11123': attribute type 17 has an invalid length. [ 408.755124][T29180] wg1 speed is unknown, defaulting to 1000 [ 408.761011][T29184] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11123'. [ 408.797490][T29184] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11123'. [ 409.002051][T29194] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 409.027847][T29194] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 409.086639][T29196] block nbd5: server does not support multiple connections per device. [ 409.102289][T29196] block nbd5: shutting down sockets [ 409.108461][T29199] dvmrp8: entered allmulticast mode [ 409.624520][T29231] netlink: 'syz.2.11145': attribute type 1 has an invalid length. [ 409.638223][T29231] netlink: 'syz.2.11145': attribute type 2 has an invalid length. [ 409.675957][T29232] team0: Port device gretap1 added [ 410.632913][T29291] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 410.685247][T29295] Bluetooth: hci1: expected 19 bytes, got 2 bytes [ 410.893836][T29313] __nla_validate_parse: 3 callbacks suppressed [ 410.893855][T29313] netlink: 207952 bytes leftover after parsing attributes in process `syz.1.11179'. [ 411.070363][T29323] syzkaller1: entered promiscuous mode [ 411.076617][T29323] syzkaller1: entered allmulticast mode [ 411.508297][T29359] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11199'. [ 411.533958][T29360] netdevsim netdevsim4: Direct firmware load for r1 failed with error -2 [ 411.614553][T29360] netdevsim netdevsim4: Falling back to sysfs fallback for: r1 [ 411.686092][T29370] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11202'. [ 411.909166][T29382] tipc: Enabling of bearer rejected, already enabled [ 412.182986][T29399] netlink: 32 bytes leftover after parsing attributes in process `syz.0.11212'. [ 412.534349][T29418] team0 (unregistering): Port device team_slave_0 removed [ 412.563723][T29418] team0 (unregistering): Port device team_slave_1 removed [ 412.790846][T29444] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11231'. [ 412.800153][T29444] netlink: 'syz.2.11231': attribute type 7 has an invalid length. [ 412.809177][T29444] netlink: 'syz.2.11231': attribute type 8 has an invalid length. [ 412.819381][T29444] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11231'. [ 412.963110][T29453] erspan0: entered promiscuous mode [ 413.036979][T29453] 8021q: adding VLAN 0 to HW filter on device team0 [ 413.067525][T29453] bridge0: port 3(batadv0) entered blocking state [ 413.074112][T29453] bridge0: port 3(batadv0) entered listening state [ 413.097086][T29453] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 413.282465][T29453] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 413.292272][T29453] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 413.303723][T29453] : Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 413.337265][T29453] : Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 413.361639][T29453] veth1_vlan: left promiscuous mode [ 413.371012][T29453] veth0_vlan: left promiscuous mode [ 413.378433][T29453] veth0_vlan: entered promiscuous mode [ 413.387815][T29453] veth1_vlan: entered promiscuous mode [ 413.397416][T29453] tipc: Resetting bearer [ 413.405148][T29453] veth1_macvtap: left promiscuous mode [ 413.422094][T29453] veth0_macvtap: left promiscuous mode [ 413.434855][T29453] veth0_macvtap: entered promiscuous mode [ 413.442072][T29453] veth1_macvtap: entered promiscuous mode [ 413.473500][T29453] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 413.505919][T29453] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 413.519713][T29453] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 413.529339][T29453] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 413.546958][T29453] 8021q: adding VLAN 0 to HW filter on device bond1 [ 413.563936][T29453] 8021q: adding VLAN 0 to HW filter on device bond2 [ 413.583480][T29453] 8021q: adding VLAN 0 to HW filter on device bond3 [ 413.609661][T29453] 8021q: adding VLAN 0 to HW filter on device bond5 [ 413.625236][ T1113] bridge0: port 1(bridge_slave_0) entered blocking state [ 413.632440][ T1113] bridge0: port 1(bridge_slave_0) entered listening state [ 413.646970][ T1113] bridge0: port 2(bridge_slave_1) entered blocking state [ 413.654194][ T1113] bridge0: port 2(bridge_slave_1) entered listening state [ 413.706341][ T2996] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 413.717502][ T2996] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.726615][ T2996] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 413.735634][ T2996] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.762529][ T2996] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 413.782345][ T2996] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.875520][ T73] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 413.891990][ T73] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 413.956014][T29495] syzkaller1: entered promiscuous mode [ 413.961522][T29495] syzkaller1: entered allmulticast mode [ 414.502283][T29537] siw: device registration error -23 [ 414.560650][T29541] netlink: 'syz.3.11270': attribute type 1 has an invalid length. [ 415.107655][T29568] syzkaller1: entered promiscuous mode [ 415.113168][T29568] syzkaller1: entered allmulticast mode [ 415.601654][T29595] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 415.706183][T29597] netlink: 628 bytes leftover after parsing attributes in process `syz.4.11297'. [ 415.727557][T29601] netlink: 212340 bytes leftover after parsing attributes in process `syz.1.11298'. [ 415.765163][T29601] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 416.066034][T29623] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11309'. [ 416.097478][T29623] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11309'. [ 416.113481][T29623] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11309'. [ 416.128816][T29623] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11309'. [ 416.276488][T29640] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11317'. [ 416.358530][ T24] IPVS: starting estimator thread 0... [ 416.457741][T29645] IPVS: using max 28 ests per chain, 67200 per kthread [ 416.644351][T29667] netlink: 'syz.4.11328': attribute type 29 has an invalid length. [ 416.667326][T29667] netlink: 'syz.4.11328': attribute type 29 has an invalid length. [ 416.691178][T29667] netlink: 500 bytes leftover after parsing attributes in process `syz.4.11328'. [ 416.702151][T29667] unsupported nla_type 58 [ 417.161388][T29699] netlink: 'syz.4.11343': attribute type 39 has an invalid length. [ 417.397140][T29710] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11347'. [ 417.792726][T29742] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11362'. [ 417.804003][T29742] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 417.839862][T29742] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 418.224776][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 418.232561][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 418.598425][T29787] syzkaller1: entered promiscuous mode [ 418.607504][T29787] syzkaller1: entered allmulticast mode [ 418.650038][T29790] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11382'. [ 418.675784][T29790] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11382'. [ 419.038468][T29811] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 419.578602][T29851] sctp: [Deprecated]: syz.3.11409 (pid 29851) Use of struct sctp_assoc_value in delayed_ack socket option. [ 419.578602][T29851] Use struct sctp_sack_info instead [ 420.287566][T29898] veth0: entered promiscuous mode [ 420.315839][T29897] veth0: left promiscuous mode [ 420.743372][T29933] tunl0: left promiscuous mode [ 420.761730][T29933] gre0: left promiscuous mode [ 420.773528][T29933] gretap0: left promiscuous mode [ 420.778793][T29933] erspan0: left promiscuous mode [ 420.783938][T29933] ip_vti0: left promiscuous mode [ 421.082543][T29933] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 421.196169][T29948] netlink: 'syz.1.11454': attribute type 10 has an invalid length. [ 421.222137][T29948] bridge_slave_1: left allmulticast mode [ 421.228688][T29948] bridge_slave_1: left promiscuous mode [ 421.249169][T29948] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.283296][T29948] .`: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 421.374307][T29959] __nla_validate_parse: 4 callbacks suppressed [ 421.374334][T29959] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11457'. [ 421.862820][T29993] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11471'. [ 422.027815][T30003] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11478'. [ 422.151941][T30015] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11483'. [ 422.214514][T30013] block nbd0: NBD_DISCONNECT [ 422.371685][T30030] netlink: 'syz.4.11490': attribute type 1 has an invalid length. [ 422.379688][T30030] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11490'. [ 422.741595][T30058] netlink: 7 bytes leftover after parsing attributes in process `syz.3.11501'. [ 423.207342][T30092] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11517'. [ 423.216659][T30092] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11517'. [ 423.281090][T30096] veth0: entered promiscuous mode [ 423.290275][T30095] veth0: left promiscuous mode [ 423.849263][T30135] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.11539'. [ 423.901563][T30140] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11540'. [ 424.096947][T30149] syzkaller1: entered promiscuous mode [ 424.102453][T30149] syzkaller1: entered allmulticast mode [ 424.219555][T30161] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 425.486111][T30253] sctp: [Deprecated]: syz.2.11586 (pid 30253) Use of int in max_burst socket option deprecated. [ 425.486111][T30253] Use struct sctp_assoc_value instead [ 425.513748][T30252] geneve3: entered promiscuous mode [ 425.540975][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 52136 - 0 [ 425.560571][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 52136 - 0 [ 425.597648][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 52136 - 0 [ 425.617484][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 52136 - 0 [ 426.429966][T30321] __nla_validate_parse: 8 callbacks suppressed [ 426.429985][T30321] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11619'. [ 426.464607][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 426.660870][T30334] netlink: 168 bytes leftover after parsing attributes in process `syz.3.11624'. [ 426.908351][T30346] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.11632'. [ 427.021881][T30354] netlink: 'syz.2.11634': attribute type 2 has an invalid length. [ 427.131793][T30364] netlink: 14560 bytes leftover after parsing attributes in process `syz.2.11639'. [ 427.338538][T30373] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 427.634284][T30398] netlink: 'syz.0.11653': attribute type 1 has an invalid length. [ 427.647066][T30398] netlink: 88 bytes leftover after parsing attributes in process `syz.0.11653'. [ 427.647625][T30401] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.11655'. [ 427.656703][T30398] netlink: 1 bytes leftover after parsing attributes in process `syz.0.11653'. [ 427.692221][T30398] netlink: 'syz.0.11653': attribute type 1 has an invalid length. [ 427.712546][T30398] netlink: 634 bytes leftover after parsing attributes in process `syz.0.11653'. [ 427.745804][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 427.938751][T30417] netlink: 60 bytes leftover after parsing attributes in process `syz.4.11663'. [ 427.982817][T30417] netlink: 60 bytes leftover after parsing attributes in process `syz.4.11663'. [ 427.984246][T30421] block nbd0: Unsupported socket: should be TCP or UNIX. [ 428.169040][T30433] netlink: 'syz.3.11669': attribute type 2 has an invalid length. [ 428.192452][T30433] netlink: 'syz.3.11669': attribute type 2 has an invalid length. [ 428.385620][ C0] bridge0: port 3(batadv0) entered learning state [ 428.567206][T30460] af_packet: tpacket_rcv: packet too big, clamped from 39 to 4294967272. macoff=96 [ 428.917432][T30482] syzkaller1: entered promiscuous mode [ 428.922942][T30482] syzkaller1: entered allmulticast mode [ 429.013662][T30487] syzkaller1: entered promiscuous mode [ 429.025432][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 429.032686][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 429.041030][T30487] syzkaller1: entered allmulticast mode [ 429.384738][ T1792] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 429.655408][ T1792] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 429.938028][T30545] netlink: 'syz.0.11719': attribute type 2 has an invalid length. [ 429.946058][T30545] netlink: 'syz.0.11719': attribute type 2 has an invalid length. [ 430.284087][T30566] netlink: 'syz.4.11727': attribute type 1 has an invalid length. [ 430.292739][T30566] netlink: 'syz.4.11727': attribute type 1 has an invalid length. [ 431.430783][T30640] netlink: 'syz.1.11757': attribute type 1 has an invalid length. [ 431.599293][T30652] syzkaller1: entered promiscuous mode [ 431.605547][T30652] syzkaller1: entered allmulticast mode [ 431.695695][T30657] __nla_validate_parse: 11 callbacks suppressed [ 431.695713][T30657] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11766'. [ 431.904740][T30669] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11771'. [ 431.976111][T30678] sock: sock_set_timeout: `syz.4.11775' (pid 30678) tries to set negative timeout [ 431.986567][T30669] team0: Port device team_slave_0 removed [ 432.422607][T30704] netlink: 'syz.1.11787': attribute type 63 has an invalid length. [ 432.447718][T30704] netlink: 'syz.1.11787': attribute type 63 has an invalid length. [ 432.575478][T30714] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.11792'. [ 432.622197][T30716] netlink: 'syz.1.11793': attribute type 10 has an invalid length. [ 432.754202][T30723] netlink: 88 bytes leftover after parsing attributes in process `syz.4.11795'. [ 433.485221][T30770] syzkaller1: entered promiscuous mode [ 433.514500][T30770] syzkaller1: entered allmulticast mode [ 434.305393][T30835] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11847'. [ 434.362948][T30839] netlink: 27 bytes leftover after parsing attributes in process `syz.1.11849'. [ 434.703244][T30861] syzkaller1: entered promiscuous mode [ 434.755644][T30865] sctp: [Deprecated]: syz.0.11861 (pid 30865) Use of struct sctp_assoc_value in delayed_ack socket option. [ 434.755644][T30865] Use struct sctp_sack_info instead [ 434.970084][T30881] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11870'. [ 435.260862][T30900] netlink: 'syz.3.11879': attribute type 9 has an invalid length. [ 435.275919][T30900] netlink: 'syz.3.11879': attribute type 11 has an invalid length. [ 435.304339][T30900] netlink: 'syz.3.11879': attribute type 12 has an invalid length. [ 435.332416][T30900] netlink: 210020 bytes leftover after parsing attributes in process `syz.3.11879'. [ 435.363820][T30900] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11879'. [ 435.617407][T30923] pim6reg1: entered promiscuous mode [ 435.632397][T30923] pim6reg1: entered allmulticast mode [ 435.930191][T30943] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 435.944579][T30943] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.095422][T30943] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 436.129589][T30943] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.229602][T30961] batadv_slave_1: entered promiscuous mode [ 436.238564][T30960] batadv_slave_1: left promiscuous mode [ 436.329775][T30970] netlink: 16215 bytes leftover after parsing attributes in process `syz.0.11912'. [ 436.338171][T30943] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 436.355747][T30943] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.431029][T30943] netdevsim netdevsim1  (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 436.442054][T30943] netdevsim netdevsim1  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.457657][T30974] netlink: 'syz.0.11913': attribute type 25 has an invalid length. [ 436.499245][ T251] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 436.499345][T30974] netlink: 'syz.0.11913': attribute type 25 has an invalid length. [ 436.513978][ T251] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 436.543888][ T251] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 436.553921][ T251] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 436.618527][ T73] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 436.636647][ T73] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.665452][ T73] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 436.673732][ T73] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.689973][ T73] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 436.703427][ T73] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.731592][ T73] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 436.765646][ T73] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.919249][T30993] __nla_validate_parse: 3 callbacks suppressed [ 436.919268][T30993] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.11925'. [ 436.943116][T30998] gretap1: entered promiscuous mode [ 436.956611][T30998] batman_adv: batadv0: Adding interface: gretap1 [ 436.973690][T30998] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500. [ 436.999320][T30998] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 437.142824][T31009] netlink: 'syz.2.11930': attribute type 21 has an invalid length. [ 437.151414][T31009] netlink: 128 bytes leftover after parsing attributes in process `syz.2.11930'. [ 437.161521][T31009] netlink: 'syz.2.11930': attribute type 5 has an invalid length. [ 437.172234][T31009] netlink: 3 bytes leftover after parsing attributes in process `syz.2.11930'. [ 437.436270][T31027] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.11938'. [ 437.546469][T31036] validate_nla: 1 callbacks suppressed [ 437.546487][T31036] netlink: 'syz.1.11941': attribute type 19 has an invalid length. [ 437.562536][T31034] netlink: 'syz.3.11942': attribute type 8 has an invalid length. [ 437.570458][T31036] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11941'. [ 437.580659][T31034] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11942'. [ 437.599393][T31036] netlink: 'syz.1.11941': attribute type 19 has an invalid length. [ 437.616741][T31034] gretap0: entered promiscuous mode [ 437.622308][T31036] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11941'. [ 437.640188][T31034] gretap0: left promiscuous mode [ 438.409594][T31092] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11963'. [ 438.530334][T31092] hsr_slave_0 (unregistering): left promiscuous mode [ 439.002347][T31138] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11972'. [ 439.028272][T31138] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11972'. [ 439.078478][T31140] pim6reg1: entered promiscuous mode [ 439.089447][T31140] pim6reg1: entered allmulticast mode [ 439.267203][T31150] netlink: 'syz.2.11979': attribute type 18 has an invalid length. [ 439.277040][T31150] netlink: 'syz.2.11979': attribute type 18 has an invalid length. [ 439.391461][T31160] netlink: 'syz.3.11983': attribute type 9 has an invalid length. [ 439.399609][T31160] netlink: 'syz.3.11983': attribute type 11 has an invalid length. [ 439.416449][T31160] netlink: 'syz.3.11983': attribute type 12 has an invalid length. [ 439.739851][T31182] syzkaller1: entered promiscuous mode [ 439.746080][T31182] syzkaller1: entered allmulticast mode [ 439.908875][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 439.927233][ T6095] block nbd0: Receive control failed (result -107) [ 439.950605][T31195] nbd0: detected capacity change from 0 to 127 [ 439.958438][T31100] block nbd0: Dead connection, failed to find a fallback [ 439.966087][T31100] block nbd0: shutting down sockets [ 439.971301][T31100] blk_print_req_error: 138 callbacks suppressed [ 439.971317][T31100] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 439.988683][T31100] buffer_io_error: 138 callbacks suppressed [ 439.988696][T31100] Buffer I/O error on dev nbd0, logical block 0, async page read [ 440.002732][T31100] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 440.013186][T31100] Buffer I/O error on dev nbd0, logical block 1, async page read [ 440.021223][T31100] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 440.031047][T31100] Buffer I/O error on dev nbd0, logical block 2, async page read [ 440.054545][T31100] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 440.065432][T31100] Buffer I/O error on dev nbd0, logical block 3, async page read [ 440.075048][T31100] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 440.088954][T31100] Buffer I/O error on dev nbd0, logical block 0, async page read [ 440.099914][T31100] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 440.110569][T31100] Buffer I/O error on dev nbd0, logical block 1, async page read [ 440.120363][T31100] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 440.130658][T31100] Buffer I/O error on dev nbd0, logical block 2, async page read [ 440.139858][T31100] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 440.155864][T31100] Buffer I/O error on dev nbd0, logical block 3, async page read [ 440.164059][T31100] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 440.174874][T31100] Buffer I/O error on dev nbd0, logical block 0, async page read [ 440.183470][T31100] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 440.193625][T31100] Buffer I/O error on dev nbd0, logical block 1, async page read [ 440.202416][T31100] ldm_validate_partition_table(): Disk read failed. [ 440.212455][T31100] Dev nbd0: unable to read RDB block 0 [ 440.232239][T31100] nbd0: unable to read partition table [ 440.258814][T31100] ldm_validate_partition_table(): Disk read failed. [ 440.277291][T31100] Dev nbd0: unable to read RDB block 0 [ 440.284065][T31100] nbd0: unable to read partition table [ 441.205544][T31272] Dead loop on virtual device ip6_vti0, fix it urgently! [ 441.276832][T31270] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 441.297111][T31270] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.310736][T31270] [ 441.313087][T31270] ====================================================== [ 441.320105][T31270] WARNING: possible circular locking dependency detected [ 441.327129][T31270] syzkaller #0 Not tainted [ 441.331548][T31270] ------------------------------------------------------ [ 441.338564][T31270] syz.4.12034/31270 is trying to acquire lock: [ 441.344703][T31270] ffff88801badda20 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_unlink_sibling+0x71/0x180 [ 441.355226][T31270] [ 441.355226][T31270] but task is already holding lock: [ 441.362574][T31270] ffff88801badd988 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x3d/0x130 [ 441.372828][T31270] [ 441.372828][T31270] which lock already depends on the new lock. [ 441.372828][T31270] [ 441.383214][T31270] [ 441.383214][T31270] the existing dependency chain (in reverse order) is: [ 441.392209][T31270] [ 441.392209][T31270] -> #10 (&root->kernfs_rwsem){++++}-{4:4}: [ 441.400275][T31270] down_write+0x96/0x200 [ 441.405026][T31270] kernfs_add_one+0x41/0x5c0 [ 441.410148][T31270] kernfs_create_dir_ns+0xde/0x130 [ 441.415765][T31270] internal_create_group+0x425/0x1180 [ 441.421652][T31270] cpuhp_invoke_callback+0x445/0x860 [ 441.427449][T31270] cpuhp_issue_call+0x430/0x7a0 [ 441.432807][T31270] __cpuhp_setup_state_cpuslocked+0x3d9/0x6b0 [ 441.439383][T31270] __cpuhp_setup_state+0x3f/0x60 [ 441.444836][T31270] do_one_initcall+0x250/0x8d0 [ 441.450113][T31270] do_initcall_level+0x104/0x190 [ 441.455558][T31270] do_initcalls+0x59/0xa0 [ 441.460406][T31270] kernel_init_freeable+0x2a6/0x3e0 [ 441.466147][T31270] kernel_init+0x1d/0x1d0 [ 441.470995][T31270] ret_from_fork+0x51e/0xb90 [ 441.476108][T31270] ret_from_fork_asm+0x1a/0x30 [ 441.481390][T31270] [ 441.481390][T31270] -> #9 (cpuhp_state_mutex){+.+.}-{4:4}: [ 441.489201][T31270] [ 441.489201][T31270] -> #8 (cpu_hotplug_lock){++++}-{0:0}: [ 441.496922][T31270] cpus_read_lock+0x42/0x160 [ 441.502027][T31270] static_key_disable+0x12/0x20 [ 441.507393][T31270] __inet_hash_connect+0x2430/0x2440 [ 441.513193][T31270] tcp_v4_connect+0xd5f/0x19b0 [ 441.518472][T31270] __inet_stream_connect+0x25a/0xdd0 [ 441.524272][T31270] inet_stream_connect+0x66/0xa0 [ 441.529722][T31270] __sys_connect+0x312/0x450 [ 441.534823][T31270] __x64_sys_connect+0x7a/0x90 [ 441.540097][T31270] do_syscall_64+0x14d/0xf80 [ 441.545199][T31270] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.551599][T31270] [ 441.551599][T31270] -> #7 (sk_lock-AF_INET){+.+.}-{0:0}: [ 441.559229][T31270] lock_sock_nested+0x48/0x100 [ 441.564502][T31270] inet_shutdown+0x6a/0x390 [ 441.569521][T31270] nbd_mark_nsock_dead+0x2e9/0x560 [ 441.575140][T31270] recv_work+0x1c7f/0x1d90 [ 441.580072][T31270] process_scheduled_works+0xb6e/0x18c0 [ 441.586136][T31270] worker_thread+0xa53/0xfc0 [ 441.591233][T31270] kthread+0x388/0x470 [ 441.595805][T31270] ret_from_fork+0x51e/0xb90 [ 441.600907][T31270] ret_from_fork_asm+0x1a/0x30 [ 441.606184][T31270] [ 441.606184][T31270] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 441.613817][T31270] __mutex_lock+0x19f/0x1300 [ 441.618921][T31270] nbd_queue_rq+0x37b/0x1100 [ 441.624027][T31270] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 441.630080][T31270] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 441.636916][T31270] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 441.643406][T31270] blk_mq_run_hw_queue+0x348/0x4f0 [ 441.649025][T31270] blk_mq_dispatch_list+0xd16/0xe10 [ 441.654735][T31270] blk_mq_flush_plug_list+0x48d/0x570 [ 441.660614][T31270] __blk_flush_plug+0x3ed/0x4d0 [ 441.665970][T31270] __submit_bio+0x28d/0x580 [ 441.670980][T31270] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 441.677119][T31270] block_read_full_folio+0x599/0x830 [ 441.682931][T31270] filemap_read_folio+0x137/0x3b0 [ 441.688478][T31270] do_read_cache_folio+0x358/0x590 [ 441.694115][T31270] read_part_sector+0xb6/0x2b0 [ 441.699398][T31270] adfspart_check_ICS+0xa5/0xa40 [ 441.704859][T31270] bdev_disk_changed+0x7ba/0x1550 [ 441.710397][T31270] blkdev_get_whole+0x380/0x510 [ 441.715759][T31270] bdev_open+0x31e/0xd30 [ 441.720512][T31270] blkdev_open+0x470/0x610 [ 441.725447][T31270] do_dentry_open+0x785/0x14e0 [ 441.730736][T31270] vfs_open+0x3b/0x340 [ 441.735315][T31270] path_openat+0x2e08/0x3860 [ 441.740416][T31270] do_file_open+0x23e/0x4a0 [ 441.745428][T31270] do_sys_openat2+0x113/0x200 [ 441.750629][T31270] __x64_sys_openat+0x138/0x170 [ 441.756004][T31270] do_syscall_64+0x14d/0xf80 [ 441.761111][T31270] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.767510][T31270] [ 441.767510][T31270] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 441.774712][T31270] __mutex_lock+0x19f/0x1300 [ 441.779817][T31270] nbd_queue_rq+0xc6/0x1100 [ 441.784831][T31270] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 441.790888][T31270] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 441.797727][T31270] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 441.804218][T31270] blk_mq_run_hw_queue+0x348/0x4f0 [ 441.809843][T31270] blk_mq_dispatch_list+0xd16/0xe10 [ 441.815566][T31270] blk_mq_flush_plug_list+0x48d/0x570 [ 441.821451][T31270] __blk_flush_plug+0x3ed/0x4d0 [ 441.826816][T31270] __submit_bio+0x28d/0x580 [ 441.831835][T31270] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 441.838065][T31270] block_read_full_folio+0x599/0x830 [ 441.843872][T31270] filemap_read_folio+0x137/0x3b0 [ 441.849404][T31270] do_read_cache_folio+0x358/0x590 [ 441.855028][T31270] read_part_sector+0xb6/0x2b0 [ 441.860316][T31270] adfspart_check_ICS+0xa5/0xa40 [ 441.865767][T31270] bdev_disk_changed+0x7ba/0x1550 [ 441.871302][T31270] blkdev_get_whole+0x380/0x510 [ 441.876672][T31270] bdev_open+0x31e/0xd30 [ 441.881437][T31270] blkdev_open+0x470/0x610 [ 441.886368][T31270] do_dentry_open+0x785/0x14e0 [ 441.891645][T31270] vfs_open+0x3b/0x340 [ 441.896224][T31270] path_openat+0x2e08/0x3860 [ 441.901322][T31270] do_file_open+0x23e/0x4a0 [ 441.906344][T31270] do_sys_openat2+0x113/0x200 [ 441.911536][T31270] __x64_sys_openat+0x138/0x170 [ 441.916902][T31270] do_syscall_64+0x14d/0xf80 [ 441.922019][T31270] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.928422][T31270] [ 441.928422][T31270] -> #4 (set->srcu){.+.+}-{0:0}: [ 441.935543][T31270] __synchronize_srcu+0xca/0x300 [ 441.940996][T31270] elevator_switch+0x1e8/0x7a0 [ 441.946268][T31270] elevator_change+0x2cc/0x450 [ 441.951543][T31270] elevator_set_default+0x36c/0x430 [ 441.957256][T31270] blk_register_queue+0x366/0x430 [ 441.962799][T31270] __add_disk+0x677/0xd50 [ 441.967652][T31270] add_disk_fwnode+0xfb/0x480 [ 441.972843][T31270] nbd_dev_add+0x72c/0xb50 [ 441.977768][T31270] nbd_init+0x168/0x1f0 [ 441.982437][T31270] do_one_initcall+0x250/0x8d0 [ 441.987710][T31270] do_initcall_level+0x104/0x190 [ 441.993157][T31270] do_initcalls+0x59/0xa0 [ 441.997993][T31270] kernel_init_freeable+0x2a6/0x3e0 [ 442.003700][T31270] kernel_init+0x1d/0x1d0 [ 442.008535][T31270] ret_from_fork+0x51e/0xb90 [ 442.013636][T31270] ret_from_fork_asm+0x1a/0x30 [ 442.018913][T31270] [ 442.018913][T31270] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 442.026717][T31270] __mutex_lock+0x19f/0x1300 [ 442.031820][T31270] elevator_change+0x1b3/0x450 [ 442.037095][T31270] elevator_set_none+0xb5/0x140 [ 442.042457][T31270] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 442.048774][T31270] nbd_start_device+0x17f/0xb10 [ 442.054129][T31270] nbd_genl_connect+0x165b/0x1cf0 [ 442.059657][T31270] genl_family_rcv_msg_doit+0x22a/0x330 [ 442.065714][T31270] genl_rcv_msg+0x61c/0x7a0 [ 442.070723][T31270] netlink_rcv_skb+0x232/0x4b0 [ 442.075991][T31270] genl_rcv+0x28/0x40 [ 442.080482][T31270] netlink_unicast+0x80f/0x9b0 [ 442.085747][T31270] netlink_sendmsg+0x813/0xb40 [ 442.091019][T31270] ____sys_sendmsg+0x972/0x9f0 [ 442.096294][T31270] ___sys_sendmsg+0x2a5/0x360 [ 442.101476][T31270] __x64_sys_sendmsg+0x1bd/0x2a0 [ 442.106919][T31270] do_syscall_64+0x14d/0xf80 [ 442.112019][T31270] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.118414][T31270] [ 442.118414][T31270] -> #2 (&q->q_usage_counter(io)#51){++++}-{0:0}: [ 442.127012][T31270] blk_alloc_queue+0x546/0x680 [ 442.132284][T31270] __blk_mq_alloc_disk+0x197/0x390 [ 442.137906][T31270] nbd_dev_add+0x499/0xb50 [ 442.142831][T31270] nbd_init+0x168/0x1f0 [ 442.147495][T31270] do_one_initcall+0x250/0x8d0 [ 442.152772][T31270] do_initcall_level+0x104/0x190 [ 442.158215][T31270] do_initcalls+0x59/0xa0 [ 442.163049][T31270] kernel_init_freeable+0x2a6/0x3e0 [ 442.168761][T31270] kernel_init+0x1d/0x1d0 [ 442.173595][T31270] ret_from_fork+0x51e/0xb90 [ 442.178692][T31270] ret_from_fork_asm+0x1a/0x30 [ 442.183969][T31270] [ 442.183969][T31270] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 442.191164][T31270] fs_reclaim_acquire+0x71/0x100 [ 442.196609][T31270] kmem_cache_alloc_noprof+0x40/0x650 [ 442.202486][T31270] __kernfs_iattrs+0xdf/0x340 [ 442.207672][T31270] kernfs_iop_setattr+0xea/0x3f0 [ 442.213117][T31270] notify_change+0xc1a/0xf40 [ 442.218215][T31270] do_truncate+0x1c2/0x250 [ 442.223139][T31270] path_openat+0x2f89/0x3860 [ 442.228236][T31270] do_file_open+0x23e/0x4a0 [ 442.233243][T31270] do_sys_openat2+0x113/0x200 [ 442.238428][T31270] __x64_sys_openat+0x138/0x170 [ 442.243788][T31270] do_syscall_64+0x14d/0xf80 [ 442.248888][T31270] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.255286][T31270] [ 442.255286][T31270] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 442.263787][T31270] __lock_acquire+0x15a5/0x2cf0 [ 442.269144][T31270] lock_acquire+0xf0/0x2e0 [ 442.274070][T31270] down_write+0x96/0x200 [ 442.278814][T31270] kernfs_unlink_sibling+0x71/0x180 [ 442.284519][T31270] __kernfs_remove+0x3e7/0x660 [ 442.289787][T31270] kernfs_remove_by_name_ns+0xaf/0x130 [ 442.295750][T31270] sysfs_remove_group+0xfc/0x2e0 [ 442.301197][T31270] sysfs_remove_groups+0x54/0xb0 [ 442.306644][T31270] net_rx_queue_update_kobjects+0x68d/0x740 [ 442.313045][T31270] netdev_unregister_kobject+0x113/0x450 [ 442.319191][T31270] unregister_netdevice_many_notify+0x1e0e/0x2370 [ 442.326121][T31270] unregister_netdevice_queue+0x31f/0x360 [ 442.332353][T31270] nsim_destroy+0x20b/0x780 [ 442.337362][T31270] __nsim_dev_port_del+0x14d/0x1b0 [ 442.342986][T31270] nsim_dev_reload_destroy+0x288/0x490 [ 442.348955][T31270] nsim_dev_reload_down+0x8a/0xc0 [ 442.354489][T31270] devlink_reload+0x1d1/0x8d0 [ 442.359674][T31270] devlink_nl_reload_doit+0x9d4/0xc80 [ 442.365554][T31270] genl_family_rcv_msg_doit+0x22a/0x330 [ 442.371609][T31270] genl_rcv_msg+0x61c/0x7a0 [ 442.376623][T31270] netlink_rcv_skb+0x232/0x4b0 [ 442.381889][T31270] genl_rcv+0x28/0x40 [ 442.386378][T31270] netlink_unicast+0x80f/0x9b0 [ 442.391646][T31270] netlink_sendmsg+0x813/0xb40 [ 442.396912][T31270] ____sys_sendmsg+0x972/0x9f0 [ 442.402186][T31270] ___sys_sendmsg+0x2a5/0x360 [ 442.407369][T31270] __x64_sys_sendmsg+0x1bd/0x2a0 [ 442.412815][T31270] do_syscall_64+0x14d/0xf80 [ 442.417912][T31270] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.424311][T31270] [ 442.424311][T31270] other info that might help us debug this: [ 442.424311][T31270] [ 442.434516][T31270] Chain exists of: [ 442.434516][T31270] &root->kernfs_iattr_rwsem --> cpuhp_state_mutex --> &root->kernfs_rwsem [ 442.434516][T31270] [ 442.448924][T31270] Possible unsafe locking scenario: [ 442.448924][T31270] [ 442.456356][T31270] CPU0 CPU1 [ 442.461708][T31270] ---- ---- [ 442.464731][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 442.467055][T31270] lock(&root->kernfs_rwsem); [ 442.479242][T31270] lock(cpuhp_state_mutex); [ 442.486342][T31270] lock(&root->kernfs_rwsem); [ 442.493611][T31270] lock(&root->kernfs_iattr_rwsem); [ 442.498883][T31270] [ 442.498883][T31270] *** DEADLOCK *** [ 442.498883][T31270] [ 442.507006][T31270] 5 locks held by syz.4.12034/31270: [ 442.512275][T31270] #0: ffffffff8fc3ee70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 442.520455][T31270] #1: ffff88807ae35130 (&dev->mutex){....}-{4:4}, at: devlink_get_from_attrs_lock+0x249/0x3c0 [ 442.530799][T31270] #2: ffff88807ae34250 (&devlink->lock_key#5){+.+.}-{4:4}, at: devlink_get_from_attrs_lock+0x258/0x3c0 [ 442.541925][T31270] #3: ffffffff8fbd0ec8 (rtnl_mutex){+.+.}-{4:4}, at: nsim_destroy+0x113/0x780 [ 442.550878][T31270] #4: ffff88801badd988 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x3d/0x130 [ 442.561564][T31270] [ 442.561564][T31270] stack backtrace: [ 442.567435][T31270] CPU: 1 UID: 0 PID: 31270 Comm: syz.4.12034 Not tainted syzkaller #0 PREEMPT(full) [ 442.567453][T31270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 442.567462][T31270] Call Trace: [ 442.567469][T31270] [ 442.567477][T31270] dump_stack_lvl+0xe8/0x150 [ 442.567499][T31270] print_circular_bug+0x2e1/0x300 [ 442.567524][T31270] check_noncircular+0x12e/0x150 [ 442.567549][T31270] __lock_acquire+0x15a5/0x2cf0 [ 442.567571][T31270] ? __lock_acquire+0x6b5/0x2cf0 [ 442.567595][T31270] lock_acquire+0xf0/0x2e0 [ 442.567613][T31270] ? kernfs_unlink_sibling+0x71/0x180 [ 442.567632][T31270] down_write+0x96/0x200 [ 442.567646][T31270] ? kernfs_unlink_sibling+0x71/0x180 [ 442.567662][T31270] ? __pfx_down_write+0x10/0x10 [ 442.567675][T31270] ? kernfs_root+0x1c/0x230 [ 442.567696][T31270] ? kernfs_root+0x1c/0x230 [ 442.567716][T31270] ? kernfs_root+0x1c/0x230 [ 442.567737][T31270] ? kernfs_root+0x1ea/0x230 [ 442.567758][T31270] kernfs_unlink_sibling+0x71/0x180 [ 442.567775][T31270] __kernfs_remove+0x3e7/0x660 [ 442.567792][T31270] kernfs_remove_by_name_ns+0xaf/0x130 [ 442.567809][T31270] sysfs_remove_group+0xfc/0x2e0 [ 442.567831][T31270] sysfs_remove_groups+0x54/0xb0 [ 442.567855][T31270] net_rx_queue_update_kobjects+0x68d/0x740 [ 442.567883][T31270] netdev_unregister_kobject+0x113/0x450 [ 442.567906][T31270] unregister_netdevice_many_notify+0x1e0e/0x2370 [ 442.567936][T31270] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 442.567959][T31270] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 442.567988][T31270] unregister_netdevice_queue+0x31f/0x360 [ 442.568012][T31270] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 442.568042][T31270] nsim_destroy+0x20b/0x780 [ 442.568062][T31270] __nsim_dev_port_del+0x14d/0x1b0 [ 442.568084][T31270] nsim_dev_reload_destroy+0x288/0x490 [ 442.568107][T31270] nsim_dev_reload_down+0x8a/0xc0 [ 442.568128][T31270] devlink_reload+0x1d1/0x8d0 [ 442.568151][T31270] ? __pfx_devlink_reload+0x10/0x10 [ 442.568170][T31270] ? apparmor_capable+0x126/0x170 [ 442.568188][T31270] ? bpf_lsm_capable+0x9/0x20 [ 442.568210][T31270] ? security_capable+0x7e/0x2c0 [ 442.568233][T31270] devlink_nl_reload_doit+0x9d4/0xc80 [ 442.568257][T31270] ? __pfx_devlink_nl_reload_doit+0x10/0x10 [ 442.568280][T31270] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 442.568306][T31270] genl_family_rcv_msg_doit+0x22a/0x330 [ 442.568328][T31270] ? __asan_memcpy+0x40/0x70 [ 442.568344][T31270] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 442.568369][T31270] ? bpf_lsm_capable+0x9/0x20 [ 442.568388][T31270] ? security_capable+0x7e/0x2c0 [ 442.568411][T31270] genl_rcv_msg+0x61c/0x7a0 [ 442.568434][T31270] ? __pfx_genl_rcv_msg+0x10/0x10 [ 442.568453][T31270] ? __pfx_devlink_nl_pre_doit_dev_lock+0x10/0x10 [ 442.568472][T31270] ? __pfx_devlink_nl_reload_doit+0x10/0x10 [ 442.568491][T31270] ? __pfx_devlink_nl_post_doit_dev_lock+0x10/0x10 [ 442.568511][T31270] ? __lock_acquire+0x6b5/0x2cf0 [ 442.568534][T31270] netlink_rcv_skb+0x232/0x4b0 [ 442.568550][T31270] ? __pfx_genl_rcv_msg+0x10/0x10 [ 442.568570][T31270] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 442.568592][T31270] ? down_read+0x272/0x2e0 [ 442.568604][T31270] ? genl_rcv+0xd/0x40 [ 442.568623][T31270] genl_rcv+0x28/0x40 [ 442.568641][T31270] netlink_unicast+0x80f/0x9b0 [ 442.568658][T31270] ? __pfx_netlink_unicast+0x10/0x10 [ 442.568673][T31270] ? netlink_sendmsg+0x650/0xb40 [ 442.568688][T31270] ? skb_put+0x11b/0x210 [ 442.568707][T31270] netlink_sendmsg+0x813/0xb40 [ 442.568727][T31270] ? __pfx_netlink_sendmsg+0x10/0x10 [ 442.568745][T31270] ? aa_sock_msg_perm+0xf1/0x1b0 [ 442.568767][T31270] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 442.568785][T31270] ____sys_sendmsg+0x972/0x9f0 [ 442.568805][T31270] ? futex_unqueue+0x211/0x240 [ 442.568825][T31270] ? __pfx_____sys_sendmsg+0x10/0x10 [ 442.568847][T31270] ? import_iovec+0x73/0xa0 [ 442.568866][T31270] ___sys_sendmsg+0x2a5/0x360 [ 442.568888][T31270] ? __pfx____sys_sendmsg+0x10/0x10 [ 442.568910][T31270] ? futex_wait+0x29a/0x380 [ 442.568939][T31270] ? __fget_files+0x2a/0x420 [ 442.568952][T31270] ? __fget_files+0x3a0/0x420 [ 442.568968][T31270] __x64_sys_sendmsg+0x1bd/0x2a0 [ 442.568989][T31270] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 442.569011][T31270] ? rcu_is_watching+0x15/0xb0 [ 442.569040][T31270] do_syscall_64+0x14d/0xf80 [ 442.569061][T31270] ? trace_irq_disable+0x3b/0x150 [ 442.569074][T31270] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.569089][T31270] ? clear_bhb_loop+0x40/0x90 [ 442.569105][T31270] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.569120][T31270] RIP: 0033:0x7fbcf9b9c819 [ 442.569134][T31270] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 442.569148][T31270] RSP: 002b:00007fbcfa987028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 442.569164][T31270] RAX: ffffffffffffffda RBX: 00007fbcf9e15fa0 RCX: 00007fbcf9b9c819 [ 442.569175][T31270] RDX: 0000000000000030 RSI: 0000200000000100 RDI: 0000000000000004 [ 442.569185][T31270] RBP: 00007fbcf9c32c91 R08: 0000000000000000 R09: 0000000000000000 [ 442.569195][T31270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 442.569205][T31270] R13: 00007fbcf9e16038 R14: 00007fbcf9e15fa0 R15: 00007ffc212672a8 [ 442.569222][T31270] [ 443.181082][T31270] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 443.191579][T31270] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.230865][T31270] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 443.242238][T31270] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.282640][T31270] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 443.293020][T31270] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.375350][ T73] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 443.383621][ T73] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.395977][ T73] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 443.404172][ T73] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.416700][ T73] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 443.425225][ T73] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.437026][ T73] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 443.445244][ T73] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.744534][ C0] bridge0: port 3(batadv0) entered forwarding state [ 443.751158][ C0] bridge0: topology change detected, propagating [ 444.384556][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 444.391811][ C0] bridge0: topology change detected, propagating [ 444.398281][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 444.405500][ C0] bridge0: topology change detected, propagating [ 446.304685][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!